← CVE Intelligence

CVE-2023-5238

EventPrime < 3.2.0 - Reflected HTML Injection on keyword parameter PUBLISHED

Description (CNA)

The EventPrime WordPress plugin before 3.2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to an HTML Injection on the plugin in the search area of the website.

Affected (CNA)

Vendor / productVersions
Unknown / EventPrimeaffected 0 before 3.2.0

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.