CVE-2022-27848: WordPress Modern Events Calendar Lite plugin <= 6.5.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Published Apr 14, 2022
·Updated
Authenticated (admin+ user) Stored Cross-Site Scripting (XSS) in Modern Events Calendar Lite (WordPress plugin) <= 6.5.1
Affected Software
1 affected component
Webnus Modern Events Calendar Lite Wordpress<=6.5.1
Remediation
Information
Update to 6.5.2 or higher version.
Event History
Apr 14, 2022
CVE Published
via MITRE·08:05 PM
Data Sourced
via MITRE·08:05 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2022-27848?
CVE-2022-27848 is an authenticated (admin+ user) Stored Cross-Site Scripting (XSS) vulnerability found in the Modern Events Calendar Lite WordPress plugin <= 6.5.1.
2
How severe is CVE-2022-27848?
CVE-2022-27848 has a severity score of 4.8, indicating a medium severity.
3
Which software is affected by CVE-2022-27848?
Modern Events Calendar Lite version 6.5.1 and earlier on the WordPress platform is affected by CVE-2022-27848.
4
How can I fix CVE-2022-27848?
To fix CVE-2022-27848, update the Modern Events Calendar Lite plugin to version 6.5.2 or higher.
5
Where can I find more information about CVE-2022-27848?
You can find more information about CVE-2022-27848 on the Patchstack vulnerability database and the official Modern Events Calendar Lite plugin page on WordPress.org.