CVE-2026-0556 | XO Event Calendar Plugin up to 3.2.10 on WordPress Shortcode xo_event_field cross site scripting

A vulnerability was found in XO Event Calendar Plugin up to 3.2.10 on WordPress and classified as problematic. Affected by this issue is the function xo_event_field of the component Shortcode Handler. The manipulation results in cross site scripting.

This vulnerability is cataloged as CVE-2026-0556. The attack may be launched remotely. There is no exploit available.