| Package | Affected versions | Patched versions |
|---|---|---|
| eventon | ≥ 4.0, < 4.5.5< 2.2.7 | 4.5.52.2.7 |
The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not properly sanitise and escape a parameter before outputting it back in pages, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free