EventPrime – Events Calendar, Bookings and Tickets, CVE-2023-5238

CVE, Research URL: CVE-2023-5238
Home page URL: Security reports for EventPrime – Events Calendar, Bookings and Tickets
Application: EventPrime – Events Calendar, Bookings and Tickets
Published on: Oct 31, 2023
Research Description: The EventPrime WordPress plugin before 3.2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to an HTML Injection on the plugin in the search area of the website.
Affected versions: max 3.3.3.
Status: vulnerable