CVE-2024-3628

creationtimestamp| type| source ---|---|--- 2026-08-14 16:00:20+00:00| seen| https://t.me/purpsec/441 2026-08-15 00:00:42+00:00| seen| https://t.me/purpsec/441...

CVE-2024-3628 EasyEvent <= 1.0.0 - Admin+ Stored XSS

The EasyEvent WordPress plugin through 1.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...