Lucene search
WPScanCVELIST:CVE-2024-0233HistoryJan 16, 2024 - 3:57 p.m.
CVE-2024-0233 EventON (Free < 2.2.8, Premium < 4.5.5) - Reflected XSS
2024-01-1615:57:02
WPScan
raw.githubusercontent.com
2
eventon
wordpress
plugin
reflected xss
high privilege user
0.0005 Low
EPSS
Percentile
16.2%
The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not properly sanitise and escape a parameter before outputting it back in pages, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Related
wpvulndb
wpvulndb
EventON (Free < 2.2.8, Premium < 4.5.5) - Reflected XSS
2024-01-10 00:00:00
cve
cve
CVE-2024-0233
2024-01-16 16:15:14
prion
prion
Cross site scripting
2024-01-16 16:15:00
wpexploit
wpexploit
EventON (Free < 2.2.8, Premium < 4.5.5) - Reflected XSS
2024-01-10 00:00:00