CVE-2024-3628 – The EasyEvent WordPress plugin through 1.0.0 does not sanitise and escape some of its …

Vuln ID: CVE-2024-3628

Published:  2024-05-07  06:15:08.997

Description: The EasyEvent WordPress plugin through 1.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

Base Score: –

Vector:

Source: NVD.NIST.GOV

 

Date:

Categorie(s):

Tag(s):