CVE-2021-24146

CVE-2021-24146: Modern Events Calendar Lite < 5.16.5 - Unauthenticated Events Export

Vendor Unknown
Product Modern Events Calendar Lite
Weakness CWE-284
Published March 18, 2021
Last update August 3, 2024

CVSS base score

What the vulnerability does

01Description

Lack of authorisation checks in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not properly restrict access to the export files, allowing unauthenticated users to exports all events data in CSV or XML format for example.

Key dates

02Disclosure timeline

March 18, 2021 CVE published
August 3, 2024 Record updated