CVE-2023-4635

CVE-2023-4635 concerns the EventON WordPress plugin. Public documentation confirms a Reflected Cross-Site Scripting (XSS) vulnerability in versions up to and including 2.2.2, caused by insufficient input sanitization and output escaping of the tab parameter. The exposed impact is unauthenticated ...

WordPress EventON Plugin <= 2.2.2 is vulnerable to Cross Site Scripting (XSS)

Software EventON Type Plugin Vulnerable versions = 2.2.2 Fixed in 2.2.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-4635 Patch priority Medium CVSS severity Medium 6.1 Developer Claim ownership PSID 2a9d3b757474 Credits Shuning Xu Required privilege...