WordPress Plugin Vulnerabilities
Simple Event Planner < 1.5.5 - Author+ Stored Cross-Site Scripting
Description
The plugin does not sanitise and escape some of its Event Options, such as event_organiser, organiser_email and organiser_contact which could allow users with a role as low as author to perform Cross-Site Scripting attacks
Affects Plugins
Fixed in 1.5.5 References
CVE
Classification
Type
XSS
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Ex.Mi
Verified
No
WPVDB ID
Timeline
Publicly Published
2022-03-23 (about 4 years ago)
Added
2022-03-26 (about 4 years ago)
Last Updated
2022-04-11 (about 4 years ago)
WPScan 