Lucene search

PRIOn knowledge basePRION:CVE-2023-49179

HistoryDec 15, 2023 - 3:15 p.m.

Cross site scripting

2023-12-1515:15:00

PRIOn knowledge base

www.prio-n.com

cross-site scripting

input neutralization

web page generation

vulnerability

event post

n.o.u.s.

stored xss

nvd

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.0%

JSON

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in N.O.U.S. Open Useful and Simple Event post allows Stored XSS.This issue affects Event post: from n/a through 5.8.6.

CPENameOperatorVersion
event_postle5.8.6

CPE	Name	Operator	Version
	event_post	le	5.8.6

References

patchstack.com/database/vulnerability/event-post/wordpress-event-post-plugin-5-8-6-cross-site-scripting-xss-vulnerability?_s_id=cve