CVE-2023-6046

creationtimestamp| type| source ---|---|--- 2024-01-19 17:17:39+00:00| seen| https://t.me/ctinow/170289 2024-02-06 11:41:10+00:00| seen| https://t.me/ctinow/179927 2025-06-13 19:34:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18324...

CVE-2023-6046

The EventON WordPress plugin before 2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored HTML Injection attacks even when the unfilteredhtml capability is disallowed...