Skip to content
Sign in
6.5 Medium

CVE-2025-46228 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post allows DOM-Based XSS.This issue affects Event post: from n/a through <= 5.9.11.

Affected products and versions

Product Affected versions Fixed in
Event post 5.9 earliest → 5.9.11 No fix stated

Other CVEs of Event post

The 7 CVEs of Event post →
CVE-2026-65486 Unauthenticated Broken Access Control in Event post <= 6.0.1 versions 5.3 Medium CVE-2025-62042 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event… 6.5 Medium CVE-2025-49298 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event… 6.5 Medium CVE-2025-26923 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event… 6.5 Medium
Track this CVE