CVE-2022-27848: Webnus Modern Events Calendar Lite

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Authenticated (admin+ user) Stored Cross-Site Scripting (XSS) in Modern Events Calendar Lite (WordPress plugin) <= 6.5.1

Affected products

• Webnus Modern Events Calendar Lite: up to and including 6.5.1

Published 2022-04-14. Last modified 2026-06-17.