CVE-2020-29395: XSS
The EventON plugin through 3.0.5 for WordPress allows addons/?q= XSS via the search field.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-29395?
CVE-2020-29395 is a vulnerability in the EventON plugin version 3.0.5 for WordPress that allows XSS (Cross-Site Scripting) attacks via the search field.
How does CVE-2020-29395 affect EventON plugin?
CVE-2020-29395 affects the EventON plugin version 3.0.5 for WordPress by enabling XSS attacks through the search field.
What is the severity of CVE-2020-29395?
CVE-2020-29395 has a severity rating of medium with a CVSS score of 6.1.
How can I fix CVE-2020-29395?
To fix CVE-2020-29395, update the EventON plugin to a version beyond 3.0.5, as the vulnerability has been patched.
Where can I find more information about CVE-2020-29395?
You can find more information about CVE-2020-29395 on the following websites: [Packet Storm Security](http://packetstormsecurity.com/files/160282/WordPress-EventON-Calendar-3.0.5-Cross-Site-Scripting.html), [GitHub](https://github.com/mustgundogdu/Research/tree/main/EventON_PLUGIN_XSS), and [MyEventON](https://www.myeventon.com/news/).