Skip to content
OpenAdvisories
Low · 3.5 CVE-2022-2843 EUVD-2022-35077GHSA-mcfr-r844-v779

MotoPress Timetable and Event Schedule Quick Edit admin-ajax.php cross site scripting

Published Aug 16, 2022 · Updated Apr 15, 2025 · Assigned by VulDB

Description

A vulnerability was found in MotoPress Timetable and Event Schedule. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /wp-admin/admin-ajax.php of the component Quick Edit. The manipulation of the argument post_title with the input <img src=x onerror=alert`2`> leads to cross site scripting. The attack may be launched remotely. VDB-206486 is the identifier assigned to this vulnerability.

Affected products

VendorProductAffectedFixed
MotoPress Timetable and Event Schedule — —

References