TI-2021-15944 CVE-2021-38337 · GHSA-m4ch-hx25-qfhfRSVPMaker Excel <= 1.1 Reflected Cross-Site ScriptingPriority LOW 29The RSVPMaker Excel WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $_SERVER["PHP_SELF"] value in the ~/phpexcel/PHPExcel/Shared/JAMA/docs/download.php file which allows attackers to i…CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00895 · Published 2021-09-10 · No fix listed CWE-79