Community Events Security Vulnerabilities and Issues — Community Events CVE List

Lucene search

Community Events ProjectCommunity Events

2 matches found

CVE•added 2023/03/23 12:15 p.m.•43 views

CVE-2022-44742

Auth. (admin+) Stored Cross-Site Scripting vulnerability in Yannick Lefebvre Community Events plugin

4.8CVSS4.9AI score0.00081EPSS

CVE•added 2024/08/05 6:16 a.m.•19 views

CVE-2024-6270

The Community Events WordPress plugin before 1.5.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

4.8CVSS5.4AI score0.0013EPSS