7.1
High
CVE-2026-28037 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ashanjay EventON…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ashanjay EventON eventon allows Reflected XSS.This issue affects EventON: from n/a through <= 4.9.12.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| EventON 4.9 | earliest → 4.9.12 | No fix stated |
Other CVEs of EventON
The 9 CVEs of EventON →
CVE-2025-63064
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ashanjay EventON…
6.5
Medium
CVE-2025-47565
Missing Authorization vulnerability in ashanjay EventON eventon allows Exploiting Incorrectly Configured Access…
6.3
Medium
CVE-2025-47564
Missing Authorization vulnerability in ashanjay EventON eventon allows Accessing Functionality Not Properly…
5.3
Medium
CVE-2024-6180
The EventON plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on…
7.2
High