CVE-2021-24341

8.8 highEPSS 1.6%

High (8.8) in xllentech english islamic calendar. EPSS 1.6% chance of exploitation in the next 30 days.

When deleting a date in the Xllentech English Islamic Calendar WordPress plugin before 2.6.8, the year_number and month_number POST parameters are not sanitised, escaped or validated before being used in a SQL statement, leading to SQL injection.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2021-06-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

xllentech:english_islamic_calendar

References

https://codevigilant.com/disclosure/2021/xllentech-english-islamic-calendar/
https://wpscan.com/vulnerability/1eba1c73-a19b-4226-afec-d27c48388a04
https://codevigilant.com/disclosure/2021/xllentech-english-islamic-calendar/
https://wpscan.com/vulnerability/1eba1c73-a19b-4226-afec-d27c48388a04

Check your stack JSON