CVE-2022-0600
28.03.2022, 18:15
The Conference Scheduler WordPress plugin before 2.4.3 does not sanitize and escape the tab parameter before outputting back in an admin page, leading to a Reflected Cross-Site Scripting.
| Vendor | Product | Version |
|---|---|---|
| myceliumdesign | conference_scheduler | 𝑥 < 2.4.3 |
𝑥
= Vulnerable software versions