← CVE Intelligence

CVE-2022-4320

WordPress Events Calendar Plugin < 1.4.5 - Multiple Reflected XSS PUBLISHED

Description (CNA)

The WordPress Events Calendar WordPress plugin before 1.4.5 does not sanitize and escapes a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against both unauthenticated and authenticated users (such as high-privilege ones like admin).

Affected (CNA)

Vendor / productVersions
Unknown / WordPress Events Calendar Pluginaffected 0 before 1.4.5

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.