Lucene search
Erwan LR (WPScan)WPVDB-ID:04A708A0-B6F3-47D1-AAC9-0BB17F57C61EHistoryJan 10, 2024 - 12:00 a.m.
EventON (Free < 2.2.8, Premium < 4.5.5) - Reflected XSS
2024-01-1000:00:00
Erwan LR (WPScan)
wpscan.com
9
eventon
plugin
reflected xss
vulnerability
adminζι
sanitise
escape
0.0005 Low
EPSS
Percentile
17.1%
Description The plugins do not properly sanitise and escape a parameter before outputting it back in pages, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
PoC
Make a logged in admin open a page with the code below
Related
cve
cve
CVE-2024-0233
2024-01-16 16:15:14
cvelist
cvelist
CVE-2024-0233 EventON (Free < 2.2.8, Premium < 4.5.5) - Reflected XSS
2024-01-16 15:57:02
nvd
nvd
CVE-2024-0233
2024-01-16 16:15:14
prion
prion
Cross site scripting
2024-01-16 16:15:00
wpexploit
wpexploit
EventON (Free < 2.2.8, Premium < 4.5.5) - Reflected XSS
2024-01-10 00:00:00