Lucene search

K
wpvulndbWpvulndbWPVDB-ID:64C677B2-DC35-4B88-8390-0977E621B90C
HistoryJan 20, 2023 - 12:00 a.m.

Quick Event Manager < 9.7.5 - Unauthenticated Stored XSS

2023-01-2000:00:00
wpscan.com
2
quick event manager
unauthenticated
stored xss
cross-site scripting
plugin
security issue
vulnerability

EPSS

0.001

Percentile

31.3%

The plugin does not sanitise and escape the β€œyourname” parameter, which could allow unauthenticated users to perform Cross-Site Scripting attacks

EPSS

0.001

Percentile

31.3%

Related for WPVDB-ID:64C677B2-DC35-4B88-8390-0977E621B90C