CVE-2022-1474

CVE-2022-1474 is a Reflected Cross-Site Scripting vulnerability affecting the WP Event Manager WordPress plugin prior to version 3.1.28. This medium-severity vulnerability (CVSS 6.1) arises from insufficient sanitization and escaping of search input on the event dashboard, allowing an attacker to inject malicious scripts. While the attack complexity is low and no authentication is required, user interaction is necessary for exploitation, potentially leading to limited impact on confidentiality and integrity. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.