7.1
Élevée
CVE-2026-28037 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ashanjay EventON…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ashanjay EventON eventon allows Reflected XSS.This issue affects EventON: from n/a through <= 4.9.12.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| EventON 4.9 | premières → 4.9.12 | Pas de correctif indiqué |
Autres CVE de EventON
Les 9 CVE de EventON →
CVE-2025-63064
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ashanjay EventON…
6.5
Moyenne
CVE-2025-47565
Missing Authorization vulnerability in ashanjay EventON eventon allows Exploiting Incorrectly Configured Access…
6.3
Moyenne
CVE-2025-47564
Missing Authorization vulnerability in ashanjay EventON eventon allows Accessing Functionality Not Properly…
5.3
Moyenne
CVE-2024-6180
The EventON plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on…
7.2
Élevée