CVE-2022-0600

6.1 mediumEPSS 0.8%

Medium (6.1) in myceliumdesign conference scheduler. EPSS 0.8% chance of exploitation in the next 30 days.

The Conference Scheduler WordPress plugin before 2.4.3 does not sanitize and escape the tab parameter before outputting back in an admin page, leading to a Reflected Cross-Site Scripting.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2022-03-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

myceliumdesign:conference_scheduler

References

https://wpscan.com/vulnerability/5dd6f625-6738-4e6a-81dc-21c0add4368d
https://wpscan.com/vulnerability/5dd6f625-6738-4e6a-81dc-21c0add4368d

Check your stack JSON