Input validation vulnerability in Modern Events Calendar Lite 5.16.2

The Modern Events Calendar lite plugin for WordPress is vulnerable to a type of security problem called Stored Cross-Site Scripting in versions up to and including 5.16.2. This means that an attacker with administrator-level permissions or higher could potentially inject malicious code into pages on a WordPress website. This malicious code would then run automatically whenever a user visits an affected page. This issue only affects multi-site installations and installations where the “unfiltered_html” feature has been disabled.