Lucene search
HistoryMay 07, 2024 - 6:15 a.m.
CVE-2024-3628
easyevent wordpress plugin
cross-site scripting
high privilege users
The EasyEvent WordPress plugin through 1.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
Related
vulnrichment
vulnrichment
CVE-2024-3628 EasyEvent <= 1.0.0 - Admin+ Stored XSS
2024-05-07 06:00:01
wpexploit
wpexploit
EasyEvent <= 1.0.0 - Admin+ Stored XSS
2024-04-16 00:00:00
cve
cve
CVE-2024-3628
2024-05-07 06:15:08
wpvulndb
wpvulndb
EasyEvent <= 1.0.0 - Admin+ Stored XSS
2024-04-16 00:00:00
cvelist
cvelist
CVE-2024-3628 EasyEvent <= 1.0.0 - Admin+ Stored XSS
2024-05-07 06:00:01
wordfence
wordfence