CVE-2022-30533: XSS
Published Jun 16, 2022
·Updated
Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated attacker to inject an arbitrary script via unspecified vectors.
Affected Software
1 affected component
Webnus Modern Events Calendar Lite Wordpress<6.3.0
Event History
Jun 16, 2022
CVE Published
via MITRE·01:35 AM
Data Sourced
via MITRE·01:35 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this cross-site scripting vulnerability?
The vulnerability ID for this cross-site scripting vulnerability is CVE-2022-30533.
2
What is the affected software?
The affected software is Webnus Modern Events Calendar Lite versions prior to 6.3.0.
3
How severe is this vulnerability?
This vulnerability has a severity score of 5.4 (medium).
4
How can an attacker exploit this vulnerability?
An attacker can exploit this vulnerability by injecting an arbitrary script via unspecified vectors.
5
Is there a fix available for this vulnerability?
Yes, the fix for this vulnerability is to upgrade to version 6.3.0 or newer of Webnus Modern Events Calendar Lite.