Lucene search
PRIOn knowledge basePRION:CVE-2023-6005HistoryJan 16, 2024 - 4:15 p.m.
Cross site scripting
2024-01-1616:15:00
PRIOn knowledge base
www.prio-n.com
3
eventon
wordpress
plugin
vulnerability
stored
xss
attacks
settings
high privilege users
admin
unfiltered_html
capability
disallowed
multisite setup
The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 does not sanitize and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Related
wpvulndb
wpvulndb
EventON (Free < 2.2.7, Premium < 4.5.5) - Admin+ Stored Cross-Site Scripting
2024-01-10 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2023-6005
2024-01-16 16:15:13
cve
cve
CVE-2023-6005
2024-01-16 16:15:13
wpexploit
wpexploit
EventON (Free < 2.2.7, Premium < 4.5.5) - Admin+ Stored Cross-Site Scripting
2024-01-10 00:00:00