medium6.1Public exploit code
CVE-2020-29395
The EventON plugin through 3.0.5 for WordPress allows addons/?q= XSS via the search field.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Wordpress Plugin EventON Calendar 3.0.5 - Reflected Cross-Site Scripting2020-12-01 · webapps · php
Impact
The EventON plugin through 3.0.5 for WordPress allows addons/?q= XSS via the search field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Myeventon | Eventon | through 3.0.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/160282/WordPress-EventON-Calendar-3.0.5-Cross-Site-Scripting.html
- https://github.com/mustgundogdu/Research/tree/main/EventON_PLUGIN_XSS
- https://www.myeventon.com/news/
- http://packetstormsecurity.com/files/160282/WordPress-EventON-Calendar-3.0.5-Cross-Site-Scripting.html
- https://github.com/mustgundogdu/Research/tree/main/EventON_PLUGIN_XSS
- https://www.myeventon.com/news/