`CVE-2023-28169`

Medium (CVSS 5.5) Published

Easy Event calendar <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting

Affected Product: Easy Event calendar
Vendor: WordPress Plugin
Published: March 13, 2023
Status: Published

References

Vulnerability Details

Easy Event calendar <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting

CVE ID: CVE-2023-28169
CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Published: March 14, 2023

This vulnerability was discovered through security research on WordPress plugins and responsibly disclosed.