Lucene search
CVE-2024-3628
EasyEvent WordPress plugin allows high privilege Cross-Site Scriptin
Show more
| Reporter | Title | Published | Views | Family All 7 |
|---|---|---|---|---|
 | CVE-2024-3628 EasyEvent <= 1.0.0 - Admin+ Stored XSS | 7 May 202406:00 | – | vulnrichment |
 | WordPress EasyEvent Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS) | 7 May 202400:00 | – | patchstack |
 | EasyEvent <= 1.0.0 - Admin+ Stored XSS | 16 Apr 202400:00 | – | wpexploit |
 | EasyEvent <= 1.0.0 - Admin+ Stored XSS | 16 Apr 202400:00 | – | wpvulndb |
 | CVE-2024-3628 | 7 May 202406:15 | – | nvd |
 | CVE-2024-3628 EasyEvent <= 1.0.0 - Admin+ Stored XSS | 7 May 202406:00 | – | cvelist |
 | Wordfence Intelligence Weekly WordPress Vulnerability Report (April 15, 2024 to April 21, 2024) | 25 Apr 202415:56 | – | wordfence |
Node
[
{
"vendor": "Unknown",
"product": "EasyEvent",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThanOrEqual": "1.0.0"
}
],
"defaultStatus": "affected"
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| ID | request body | /wp-admin/options-general.php?page=easyevent | The EasyEvent WordPress plugin allows XSS through unsanitized settings. | CWE-79 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo07 May 2024 06:15Current
5.9Medium risk
Vulners AI Score5.9
CVSS33.8
EPSS0.00143
SSVC