medium5.4
CVE-2023-1126
The WP FEvents Book WordPress plugin through 0.46 does not sanitise and escape some parameters, which could allow any authenticated users, such as subscriber t…
Impact
The WP FEvents Book WordPress plugin through 0.46 does not sanitise and escape some parameters, which could allow any authenticated users, such as subscriber to perform Cross-Site Scripting attacks
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wp Fevents Book Project | Wp Fevents Book | through 0.46 |