CVE-2021-24146
Modern Events Calendar Lite < 5.16.5 - Unauthenticated Events Export
- State
- Published
- Severity
- Not scored
- Published
- Mar 18, 2021
- Updated
- Aug 3, 2024
- Reserved
- Jan 14, 2021
Description
Lack of authorisation checks in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not properly restrict access to the export files, allowing unauthenticated users to exports all events data in CSV or XML format for example.
Scores
The record has no CVSS score.
Weaknesses
- CWE-284 Improper Access Control
Affected Products
| Product | Versions |
|---|---|
Modern Events Calendar LiteUnknown |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.