CVE-2023-7170: EventON-RSVP < 2.9.5 - Reflected XSS
Published Jan 22, 2024
·Updated
The EventON-RSVP WordPress plugin before 2.9.5 does not sanitise and escape some parameters before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Affected Software
1 affected component
Myeventon Rsvp Events Wordpress<2.9.5
Event History
Jan 22, 2024
CVE Published
via MITRE·07:14 PM
Data Sourced
via MITRE·07:14 PM
DescriptionWeakness
Data Sourced
via NVD·08:15 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-7170?
CVE-2023-7170 has a severity rating that indicates a Reflected Cross-Site Scripting vulnerability which poses a risk to high privilege users.
2
How do I fix CVE-2023-7170?
To fix CVE-2023-7170, update the EventON-RSVP WordPress plugin to version 2.9.5 or later.
3
Who is affected by CVE-2023-7170?
CVE-2023-7170 affects users of the EventON-RSVP WordPress plugin prior to version 2.9.5.
4
What type of vulnerability is CVE-2023-7170?
CVE-2023-7170 is classified as a Reflected Cross-Site Scripting (XSS) vulnerability.
5
Can CVE-2023-7170 impact administrator accounts?
Yes, CVE-2023-7170 can be exploited against high privilege users, including administrators.