2 matches found
CVE-2023-5238
The EventPrime WordPress plugin before 3.2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to an HTML Injection on the plugin in the search area of the website...
6.1CVSS5.8AI score0.0042EPSS
SaveExploits2References1
CVE-2023-5238: Improper Neutralization of Input During Web Page Generation
The EventPrime WordPress plugin before 3.2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to an HTML Injection on the plugin in the search area of the website...
6.1CVSS6.4AI score0.0042EPSS
SaveExploits2References2
20