{"id":6490,"date":"2025-06-05T23:50:51","date_gmt":"2025-06-05T23:50:51","guid":{"rendered":"http:\/\/localhost\/?p=6490"},"modified":"2025-06-05T23:50:51","modified_gmt":"2025-06-05T23:50:51","slug":"modern-events-calendar-7219-information-exposure","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=6490","title":{"rendered":"Modern Events Calendar <= 7.21.9 - Information Exposure"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nModern Events Calendar <= 7.21.9 - Information Exposure<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-06-06T03:41:23.431Z<\/td>\n<\/tr>\n
Last Seen<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\nwebnus\/<\/td>\n<\/tr>\n
Product<\/th>\nModern Events Calendar Lite<\/td>\n<\/tr>\n
Version<\/th>\n*<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n\n\n\n\n
Base Score<\/th>\n5.3 (MEDIUM)<\/td>\n<\/tr>\n
Attack Vector<\/th>\nCVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:L\/I:N\/A:N<\/td>\n<\/tr>\n
Confidentiality Impact<\/th>\n<\/td>\n<\/tr>\n
Integrity Impact<\/th>\n<\/td>\n<\/tr>\n
Availability Impact<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nThe Modern Events Calendar Lite plugin for WordPress is vulnerable to Full Path Disclosure. Unauthenticated attackers can retrieve the full path of the web application, which can aid other attacks. The information is not useful on its own and requires another vulnerability to be present for damage.<\/td>\n<\/tr>\n
AI Severity<\/th>\nMedium<\/td>\n<\/tr>\n
Vendor<\/th>\nWebnus<\/td>\n<\/tr>\n
Product<\/th>\nModern Events Calendar Lite<\/td>\n<\/tr>\n
Affected Version<\/th>\n<= 7.21.9<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n