CVE-2023-7200: EventON < 4.4.1 - Reflected Cross-Site Scripting
The EventON WordPress plugin before 4.4.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-7200?
CVE-2023-7200 has a high severity rating due to its potential for exploitation via Reflected Cross-Site Scripting.
How do I fix CVE-2023-7200?
To fix CVE-2023-7200, update the EventON WordPress plugin to version 4.4.1 or later.
Who is affected by CVE-2023-7200?
CVE-2023-7200 affects users of the EventON WordPress plugin prior to version 4.4.1, especially high privilege users like admins.
What is the vulnerability type of CVE-2023-7200?
CVE-2023-7200 is classified as a Reflected Cross-Site Scripting vulnerability.
Can CVE-2023-7200 be exploited remotely?
Yes, CVE-2023-7200 can be exploited remotely by an attacker to execute malicious scripts in the context of a user's session.