CVE-2026-110903
MEDIUM NVDCVSS Score
6.5
Severity
MEDIUM
Source
NVD
Published
Oct 16, 2026
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Stored XSS.This issue affects The Events Calendar: from n/a through 6.18.1.