Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Product

Products as named in CPE, with their records.

Published
2 selected

1 record

Vendor: Eventify Project Component: Eventify Clear all filters
TI-2022-03758 CVE-2022-4110 · GHSA-ffr6-hhvx-vgcq

Eventify <= 2.1 - Admin+ Stored XSS

Priority MEDIUM 55

The Eventify™ WordPress plugin through 2.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_h…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00559 Published 2022-12-26 No fix listed