CVE-2021-24480CWE-79

Event Geek <= 2.5.2 - Stored Cross-site Scripting (XSS)

published August 2, 2021

CVSS
—
EPSS
1%
Percentile
48.7
In the wild
Unconfirmed
What it is

The Event Geek WordPress plugin through 2.5.2 does not sanitise or escape its "Use your own " setting before outputting it in the page, leading to an authenticated (admin+) stored Cross-Site Scripting issue

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00613 · 48.7th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2021-08-02T10:32Z
EPSS history
Timeline
  • 02 AUG 10:32Z
    Event Geek <= 2.5.2 - Stored Cross-site Scripting (XSS)
    cvelistv5