Lucene search
PRIOn knowledge basePRION:CVE-2022-4110HistoryDec 26, 2022 - 1:15 p.m.
Cross site scripting
2022-12-2613:15:00
PRIOn knowledge base
www.prio-n.com
2
eventify
wordpress
plugin
stored cross-site scripting
attacks
high privilege users
unfiltered_html
capability
multisite setup
0.001 Low
EPSS
Percentile
23.5%
The Eventify™ WordPress plugin through 2.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Related
cve
cve
CVE-2022-4110
2022-12-26 13:15:12
wpvulndb
wpvulndb
Eventify <= 2.1 - Admin+ Stored XSS
2022-11-30 00:00:00
wpexploit
wpexploit
Eventify <= 2.1 - Admin+ Stored XSS
2022-11-30 00:00:00
nvd
nvd
CVE-2022-4110
2022-12-26 13:15:12
cvelist
cvelist
CVE-2022-4110 Eventify <= 2.1 - Admin+ Stored XSS
2022-12-26 12:28:12