Quick Event Manager < 9.7.5 - Unauthenticated Stored XSS

🗓️ 20 Jan 2023 00:00:00Reported by wpvulndbType

Quick Event Manager < 9.7.5 Unauthenticated Stored XSS. Plugin doesn't sanitize "yourname" parameter, leading to XSS attacks

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2023-23979 WordPress Quick Event Manager Plugin <= 9.7.4 is vulnerable to Cross Site Scripting (XSS)	6 Apr 202305:17	–	cvelist
Vulnrichment	CVE-2023-23979 WordPress Quick Event Manager Plugin <= 9.7.4 is vulnerable to Cross Site Scripting (XSS)	6 Apr 202305:17	–	vulnrichment
NVD	CVE-2023-23979	6 Apr 202306:15	–	nvd
Prion	Cross site scripting	6 Apr 202306:15	–	prion
Patchstack	WordPress Quick Event Manager Plugin <= 9.7.4 is vulnerable to Cross Site Scripting (XSS)	20 Jan 202300:00	–	patchstack
CVE	CVE-2023-23979	6 Apr 202306:15	–	cve

Vulners

Node

fullworksplugins quick_event_managerRange<9.7.5wordpress

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

20 Jan 2023 00:00Current

5.9Medium risk

Vulners AI Score5.9

EPSS0.001