CVE-2022-0364

5.4 mediumEPSS 70%

Medium (5.4) in webnus modern events calendar lite. EPSS 70% chance of exploitation in the next 30 days.

The Modern Events Calendar Lite WordPress plugin before 6.4.0 does not sanitize and escape some of the Hourly Schedule parameters which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 70% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2022-03-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

webnus:modern_events_calendar_lite

References

https://wpscan.com/vulnerability/0eb40cd5-838e-4b53-994d-22cf7c8a6c50
https://wpscan.com/vulnerability/0eb40cd5-838e-4b53-994d-22cf7c8a6c50

Check your stack JSON