Lucene search

K
wpvulndbWpvulndbWPVDB-ID:009F9118-8D88-46B6-B4A7-538717270C24
HistoryOct 26, 2023 - 12:00 a.m.

EventON < 2.2.3 - Reflected Cross Site Scripting

2023-10-2600:00:00
wpscan.com
7
eventon plugin
reflected cross-site scripting
high-privilege users

EPSS

0.001

Percentile

34.8%

Description The plugin does not sanitize and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high-privilege users such as admin.

EPSS

0.001

Percentile

34.8%

Related for WPVDB-ID:009F9118-8D88-46B6-B4A7-538717270C24