Skip to content
Sign in
6.5 Medium

CVE-2025-24585 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post allows Stored XSS.This issue affects Event post: from n/a through <= 5.9.7.

Affected products and versions

Product Affected versions Fixed in
Event post 5.9 earliest → 5.9.7 No fix stated
Event post 5.9 earliest → 5.9.7 No fix stated

Other CVEs of Event post

The 3 CVEs of Event post →
CVE-2024-38735 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in… 7.5 High CVE-2023-49179 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in N.O.U.S 6.5 Medium
Track this CVE