CVE-2021-24480
Assigner: WPScan
Published: 2021-08-02T10:32:20
State: PUBLISHED
affected: product: Event Geek
vendor: Unknown
versions: lessThanOrEqual: 2.5.2
status: affected
version: 2.5.2
versionType: custom
credits: value: ABISHEIK M
descriptions: value: The Event Geek WordPress plugin through 2.5.2 does not sanitise or escape its "Use your own " setting before outputting it in the page, leading to an authenticated (admin+) stored Cross-Site Scripting issue
problemTypes: descriptions: cweId: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
type: CWE
source: discovery: UNKNOWN
title: Event Geek <= 2.5.2 - Stored Cross-site Scripting (XSS)
x_generator: WPScan CVE Generator