← CVE Intelligence

CVE-2023-1126

WP FEvents Book <= 0.46 - Subscriber+ Stored XSS PUBLISHED

Description (CNA)

The WP FEvents Book WordPress plugin through 0.46 does not sanitise and escape some parameters, which could allow any authenticated users, such as subscriber to perform Cross-Site Scripting attacks

Affected (CNA)

Vendor / productVersions
Unknown / WP FEvents Bookaffected 0 through 0.46

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.