Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2023-1126

WP FEvents Book <= 0.46 - Subscriber+ Stored XSS

Description

The WP FEvents Book WordPress plugin through 0.46 does not sanitise and escape some parameters, which could allow any authenticated users, such as subscriber to perform Cross-Site Scripting attacks

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown WP FEvents Book

Default version status: affected

  • 0 to ≤ 0.46affected

References