CVE-2022-46863 Auth

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Event Manager plugin <= 9.6.4 versions.

Affected products and versions

Product	Affected versions	Fixed in
Quick Event Manager 9.6	earliest → 9.6.4	No fix stated

Other CVEs of Quick Event Manager

The 4 CVEs of Quick Event Manager →

CVE-2023-23975 Missing Authorization vulnerability in Fullworks Quick Event Manager allows Exploiting Incorrectly Configured Access… 5.3 Medium CVE-2023-23979 Unauth 7.1 High CVE-2023-23974 Cross-Site Request Forgery (CSRF) vulnerability in Fullworks Quick Event Manager… 5.4 Medium