Low · 3.4 CVE-2022-27848 EUVD-2022-32336GHSA-rq34-3jg9-wwp6

WordPress Modern Events Calendar Lite plugin <= 6.5.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Published Apr 14, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authenticated (admin+ user) Stored Cross-Site Scripting (XSS) in Modern Events Calendar Lite (WordPress plugin) <= 6.5.1

Vendor	Product	Affected	Fixed
Webnus	Modern Events Calendar Lite (WordPress plugin)	<= 6.5.1 – ≤ 6.5.1	—