2 matches found
EUVD-2026-78297
The Eventin – Event Calendar, Event Registration, Tickets & Booking AI Powered plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'etnsheduleobjective' scheduleslot Parameter in all versions up to, and including, 4.1.23 due to insufficient input sanitization and output escaping...
6.4CVSS5.9AI score0.0025EPSS
SaveExploits0References16
CVE-2026-15402: Improper Neutralization of Input During Web Page Generation
The Eventin – Event Calendar, Event Registration, Tickets & Booking AI Powered plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'etnsheduleobjective' scheduleslot Parameter in all versions up to, and including, 4.1.23 due to insufficient input sanitization and output escaping...
6.4CVSS6AI score0.0025EPSS
SaveExploits0References2
20