Skip to content

Known vulnerabilities in Bastien Ho Event post

Is your version affected?

CVE Summary Score Published
CVE-2026-65486 Unauthenticated Broken Access Control in Event post <= 6.0.1 versions 5.3 Medium Jul 23, 2026
CVE-2025-62042 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event… 6.5 Medium Oct 22, 2025
CVE-2025-49298 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event… 6.5 Medium Jun 6, 2025
CVE-2025-46228 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event… 6.5 Medium Apr 22, 2025
CVE-2025-26923 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event… 6.5 Medium Mar 26, 2025
CVE-2025-24585 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event… 6.5 Medium Jan 24, 2025
CVE-2024-38735 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in… 7.5 High Jul 12, 2024

Other Bastien Ho products