CVE-2023-48326: WordPress Events Manager Plugin <= 6.4.5 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pixelite Events Manager allows Reflected XSS.This issue affects Events Manager: from n/a through 6.4.5.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2023-48326?
CVE-2023-48326 is a vulnerability in the WordPress Events Manager Plugin that allows for Cross Site Scripting (XSS).
How severe is CVE-2023-48326?
CVE-2023-48326 has a severity rating of 7.1, which is considered high.
How does CVE-2023-48326 affect the Events Manager Plugin?
CVE-2023-48326 affects the Events Manager Plugin version up to and including 6.4.5, allowing for Reflected XSS (Cross-site Scripting).
What is Cross-site Scripting (XSS)?
Cross-site Scripting (XSS) is a type of vulnerability that allows attackers to inject malicious scripts into web pages viewed by other users.
Is there a fix for CVE-2023-48326?
Yes, a fix for CVE-2023-48326 is available in the form of a patch provided by the plugin developer.