CVE-2022-25611

MEDIO 5.4CVE-2022-25611 · Published 25/03/2022 · updated 17/06/2026

In breve

CVE-2022-25611 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda simple event planner (presstigers).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.57%, superiore al 47.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
simple event planner presstigers	`≤ 1.5.4`	No fix yet

Description

Authenticated Stored Cross-Site Scripting (XSS) in Simple Event Planner plugin <= 1.5.4 allows attackers with contributor or higher user roles to inject the malicious script by using vulnerable parameter &custom[add_seg][].

References

patchstack.com/database/vulnerability/simple-event-planner/wordpress-simple-event-planner-plugin-1-5-4-authenticated-stored-cross-site-scripting-xss-vulnerability · Release Notes
wordpress.org/plugins/simple-event-planner · Release Notes

Altre vulnerabilità di simple event planner

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free