← Database

CVE-2022-25611

MEDIUM CVSS: 4.1 Published: 2022-03-25 Modified: 2026-06-17

Description

Authenticated Stored Cross-Site Scripting (XSS) in Simple Event Planner plugin <= 1.5.4 allows attackers with contributor or higher user roles to inject the malicious script by using vulnerable parameter &custom[add_seg][].

Affected Platforms

Presstigers Simple Event Planner

Weakness Type

CWE-79, CWE-79

References