EventON, CVE-2023-6005

CVE, Research URL: CVE-2023-6005
Home page URL: Security reports for EventON
Application: EventON
Published on: Jan 16, 2024
Research Description: The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 does not sanitize and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Affected versions: Min -, max 2.2.7.
Status: vulnerable