CVE-2020-29395

概要

参考情報

• packetstormsecurity.com/files/160282/WordPress-EventON-Calendar-3.0.5-Cross-Site-Scripting.html · Exploit
• mustgundogdu/Research · Exploit
• myeventon.com/news · Vendor Advisory

eventon のその他の脆弱性

• CVE-2025-3527中 5.4The EventON Pro plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check in the 'assets/lib…
• CVE-2024-6910中 4.8The EventON WordPress plugin before 2.2.17 does not sanitise and escape some of its settings, which could allow high privilege users such as…
• CVE-2024-4752中 5.9The EventON WordPress plugin before 2.2.15 does not sanitise and escape some of its settings, which could allow high privilege users such as…
• CVE-2023-7200中 6.1The EventON WordPress plugin before 4.4.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Refle…
• CVE-2024-0238中 6.1The EventON Premium WordPress plugin before 4.5.6, EventON WordPress plugin before 2.2.8 do not have authorisation in an AJAX action, and do…