title: Modern Events Calendar Lite < 5.22.3 - Authenticated Stored Cross Site Scripting
description: The Modern Events Calendar Lite WordPress plugin before 5.22.3 does not properly sanitize or escape values set by users with access to adjust settings withing wp-admin.
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
product: Modern Events Calendar Lite
vendor: Unknown
versions:
lessThan: 5.22.3, status: affected, version: 5.22.3, versionType: custom
}