CVE-2022-25611: Presstigers Simple Event Planner

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Authenticated Stored Cross-Site Scripting (XSS) in Simple Event Planner plugin <= 1.5.4 allows attackers with contributor or higher user roles to inject the malicious script by using vulnerable parameter &custom[add_seg][].

Affected products

• Presstigers Simple Event Planner: up to and including 1.5.4

Published 2022-03-25. Last modified 2026-06-17.