CVE-2023-4250: EventPrime < 3.2.0 - Reflected XSS
Published Oct 31, 2023
·Updated
The EventPrime WordPress plugin before 3.2.0 does not sanitise and escape some parameters before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
Affected Software
1 affected component
Metagauss Eventprime Wordpress<3.2.0
Event History
Oct 31, 2023
CVE Published
via MITRE·01:54 PM
Data Sourced
via MITRE·01:54 PM
DescriptionWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-4250?
The severity of CVE-2023-4250 is medium with a score of 6.1.
2
How does CVE-2023-4250 affect EventPrime?
CVE-2023-4250 affects EventPrime plugin versions before 3.2.0.
3
What is the vulnerability in CVE-2023-4250?
CVE-2023-4250 is a Reflected Cross-Site Scripting vulnerability in EventPrime plugin.
4
Who is affected by CVE-2023-4250?
High privilege users such as admin in EventPrime plugin versions before 3.2.0 are affected by CVE-2023-4250.
5
How can I fix CVE-2023-4250?
To fix CVE-2023-4250, update EventPrime plugin to version 3.2.0 or above.