CVE-2024-3628

The EasyEvent WordPress plugin (versions 1.0.0 and earlier ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitize and escape certain plugin settings, which allows high-privilege users, such as administrators , to perform XSS attacks even when unf...