CVE-2022-4115

MEDIUM 5.4CVE-2022-4115 · Published 27/06/2023 · updated 17/06/2026

In short

CVE-2022-4115 is a MEDIUM (CVSS 5.4) vulnerability affecting editorial calendar (editorial calendar project).
Chance of exploitation in the next 30 days (EPSS): 0.44%, higher than 38.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
editorial calendar editorial_calendar_project	`≤ 3.7.12`	No fix yet

Description

The Editorial Calendar WordPress plugin before 3.8.3 does not sanitise and escape its settings, allowing users with roles as low as contributor to inject arbitrary web scripts in the plugin admin panel, enabling a Stored Cross-Site Scripting vulnerability targeting higher privileged users.

References

wpscan.com/vulnerability/2b5071e1-9532-4a6c-9da4-d07932474ca4 · Exploit

More vulnerabilities in editorial calendar

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free