Description
The WP FEvents Book WordPress plugin through 0.46 does not sanitise and escape some parameters, which could allow any authenticated users, such as subscriber to perform Cross-Site Scripting attacks
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | WP FEvents Book | ≤ 0.46 | — |
References
- https://wpscan.com/vulnerability/87ce3c59-b234-47bf-abca-e690b53bbe82 exploit vdb-entry technical-description