CVE-2023-27617

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in David F. Carr RSVPMaker plugin = 10.6.6 versions...

CVE-2023-27617

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in David F. Carr RSVPMaker plugin = 10.6.6 versions...

CVE-2023-27617 WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in David F. Carr RSVPMaker plugin = 10.6.6 versions...

CVE-2023-27617

CVE-2023-27617 corresponds to a Stored XSS vulnerability in the WordPress RSVPMaker plugin, affecting versions up to 10.6.6 with admin+ authentication. Multiple sources (NVD, Red Hat, Patchstack, CVE records) confirm that the issue exists under privileged admin conditions and can lead to script i...