Eventespresso: >> Event Espresso >> 2.27 Security Vulnerabilities
A cross-site scripting (XSS) vulnerability in wp-content/plugins/event-espresso-core-reg/admin_pages/messages/templates/ee_msg_admin_overview.template.php in the Event Espresso Core plugin before 4.10.7.p for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter.
CVSS Score
6.1
EPSS Score
0.346
Published
2021-07-13