Dwalliance: >> Easyevent >> 1.0.0 Security Vulnerabilities
The EasyEvent WordPress plugin through 1.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
CVSS Score
3.8
EPSS Score
0.002
Published
2024-05-07