WordPress Modern Events Calendar Lite Plugin Cross-Site Scripting (CVE-2022-0364)

A stored cross-site scripting vulnerability exists for the WordPress plugin Modern Events Calendar Lite. This vulnerability is due to improper input validation for multiple parameters in the Hourly Schedule section...

CVE-2022-0364

creationtimestamp| type| source ---|---|--- 2022-03-21 21:26:22+00:00| seen| https://t.me/cibsecurity/39319...

CVE-2022-0364

The Modern Events Calendar Lite WordPress plugin before 6.4.0 does not sanitize and escape some of the Hourly Schedule parameters which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

CVE-2022-0364

The CVE-2022-0364 entry affects the WordPress plugin Modern Events Calendar Lite (before 6.4.0). The vulnerability arises from insufficient sanitization/escaping of Hourly Schedule parameters, allowing stored Cross-Site Scripting (XSS) for users with privileges as low as contributor. Impact is st...