6.5
Medium
CVE-2025-26923 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post allows Stored XSS.This issue affects Event post: from n/a through <= 5.9.8.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Event post 5.9 | earliest → 5.9.8 | No fix stated |
Other CVEs of Event post
The 7 CVEs of Event post →
CVE-2026-65486
Unauthenticated Broken Access Control in Event post <= 6.0.1 versions
5.3
Medium
CVE-2025-62042
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event…
6.5
Medium
CVE-2025-49298
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event…
6.5
Medium
CVE-2025-46228
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event…
6.5
Medium