CVE-2022-4320

CVE-2022-4320 affects the WordPress Events Calendar plugin prior to version 1.4.5. The issue is improper sanitization/escaping of a parameter, allowing Reflected XSS that can affect both unauthenticated and authenticated users (including admins). Proof-of-concept details and PoCs are available in...