Cross site scripting

The rsvp plugin before 2.3.8 for WordPress has persistent XSS via the note field on the attendee-list screen...

PT-2019-8497

Name of the Vulnerable Software and Affected Versions WordPress rsvp plugin versions prior to 2.3.8 Description The issue allows for persistent XSS via the note field on the attendee-list screen. Recommendations For versions prior to 2.3.8, update to version 2.3.8 or later to resolve the issue...