CVE-2023-5238

MEDIUM

6.1

Beschreibung

The EventPrime WordPress plugin before 3.2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to an HTML Injection on the plugin in the search area of the website.

CVE Details

CVSS v3.1 Bewertung6.1

SchweregradMEDIUM

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionREQUIRED

Veroffentlicht10/31/2023

Zuletzt geandert4/22/2025

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

metagauss:eventprime

Schwachen (CWE)

CWE-79

Referenzen

https://wpscan.com/vulnerability/47a5fbfd-f47c-4356-8567-b29dadb48423(contact@wpscan.com)

https://wpscan.com/vulnerability/47a5fbfd-f47c-4356-8567-b29dadb48423(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.