CVE-2023-23979 Unauth

Description

Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Event Manager plugin <= 9.7.4 versions.

Affected products and versions

Product	Affected versions	Fixed in
Quick Event Manager 9.7	earliest → 9.7.4	No fix stated

Other CVEs of Quick Event Manager

The 4 CVEs of Quick Event Manager →

CVE-2023-23975 Missing Authorization vulnerability in Fullworks Quick Event Manager allows Exploiting Incorrectly Configured Access… 5.3 Medium CVE-2022-46863 Auth 5.9 Medium CVE-2023-23974 Cross-Site Request Forgery (CSRF) vulnerability in Fullworks Quick Event Manager… 5.4 Medium