Cross site scripting

2023-10-2518:17:00

PRIOn knowledge base

www.prio-n.com

xss vulnerability

eventprime

plugin vulnerability

unauthenticated reflected vulnerability

6 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.0%

JSON

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in EventPrime EventPrime – Events Calendar, Bookings and Tickets plugin <= 3.1.5 versions.

CPENameOperatorVersion
eventprimele3.1.5

CPE	Name	Operator	Version
	eventprime	le	3.1.5

References

patchstack.com/database/vulnerability/eventprime-event-calendar-management/wordpress-eventprime-plugin-3-1-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve