Unscored CVE-2022-30533 EUVD-2022-52393GHSA-2vhv-xj4g-f2fq

Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated attacker to inject…

Published Jun 16, 2022 · Updated Aug 3, 2024 · Assigned by jpcert

Vendor: Webnus Product: Modern Events Calendar Lite

Description

Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated attacker to inject an arbitrary script via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Webnus	Modern Events Calendar Lite	versions prior to 6.3.0	—

References

https://webnus.net/modern-events-calendar/lite/
https://jvn.jp/en/jp/JVN04155116/index.html