CVE-2024-33940: WordPress EventON plugin <= 2.2.14 - Cross Site Scripting (XSS) vulnerability
Published May 3, 2024
·Updated
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ashan Jay EventON allows Stored XSS.This issue affects EventON: from n/a through 2.2.14.
Affected Software
1 affected component
Ashan Jay EventON<=2.2.14
Event History
May 3, 2024
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-33940?
CVE-2024-33940 is classified as a stored Cross-Site Scripting (XSS) vulnerability.
2
How do I fix CVE-2024-33940?
To fix CVE-2024-33940, update the EventON plugin to version 2.2.15 or higher.
3
Which versions of EventON are affected by CVE-2024-33940?
CVE-2024-33940 affects EventON versions from n/a through 2.2.14.
4
What does CVE-2024-33940 allow attackers to do?
CVE-2024-33940 allows attackers to execute arbitrary JavaScript in the context of the user's browser through stored XSS.
5
Who is the vendor affected by CVE-2024-33940?
The vendor affected by CVE-2024-33940 is Ashan Jay, specifically for their EventON product.