CVE-2022-36390

MEDIUM CVSS: 4.1 Published: 2022-09-21 Modified: 2026-06-17

Description

Authenticated (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Totalsoft Event Calendar – Calendar plugin <= 1.4.6 at WordPress.

Affected Platforms

Total-Soft Event Calendar

Weakness Type

CWE-79

References