CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-6046 – EventON < 2.2 - Admin+ Stored HTML Injection
https://notcve.org/view.php?id=CVE-2023-6046
The EventON WordPress plugin before 2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored HTML Injection attacks even when the unfiltered_html capability is disallowed. El complemento EventON WordPress anterior a 2.2 no sanitiza ni escapa a algunas de sus configuraciones, lo que podría permitir a usuarios con privilegios elevados, como el administrador, realizar ataques de inyección de HTML almacenado incluso cuando la capacidad unfiltered_html no está permitida. The EventON plugin for WordPress is vulnerable to HTML Injection via admin settings in all versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary HTML in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. • https://wpscan.com/vulnerability/97f1d403-ae96-4c90-8d47-9822f4d68033 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 2CVE-2023-4635 – EventON <= 2.2.2 - Reflected Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2023-4635
The EventON plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in versions up to, and including, 2.2.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. El complemento EventON para WordPress es vulnerable a Cross-Site Scripting reflejado a través del parámetro 'tab' en versiones hasta la 2.2.2 incluida debido a una sanitización de entrada y un escape de salida insuficientes. Esto hace posible que atacantes no autenticados inyecten scripts web arbitrarios en páginas que se ejecutan si logran engañar a un usuario para que realice una acción como hacer click en un enlace. • https://github.com/xsn1210/vul/blob/main/xss%5BEventON%5D%20.md https://www.wordfence.com/threat-intel/vulnerabilities/id/115ad0b2-febe-485a-8fb5-9bd6edc37ef7?source=cve • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-4388 – EventON < 2.2 - Admin+ Stored XSS
https://notcve.org/view.php?id=CVE-2023-4388
The EventON WordPress plugin before 2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) El complemento EventON de WordPress anterior a 2.2 no sanitiza ni escapa a algunas de sus configuraciones, lo que podría permitir a usuarios con privilegios elevados, como el administrador, realizar ataques de Cross-Site Scripting almacenados incluso cuando la capacidad unfiltered_html no está permitida (por ejemplo, en una configuración multisitio) The EventON plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. • https://wpscan.com/vulnerability/4086b62c-c527-4721-af63-7f2687c98648 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.5EPSS: 11%CPEs: 1EXPL: 2CVE-2023-3219 – EventON < 2.1.2 - Unauthenticated Post Access via IDOR
https://notcve.org/view.php?id=CVE-2023-3219
The EventON WordPress plugin before 2.1.2 does not validate that the event_id parameter in its eventon_ics_download ajax action is a valid Event, allowing unauthenticated visitors to access any Post (including unpublished or protected posts) content via the ics export functionality by providing the numeric id of the post. The EventON plugin for WordPress is vulnerable to an Insecure Direct Object Reference in versions up to, and including, 7.5.4. This is due to improper validation and authorization checks affecting the eventon_ics_download AJAX action. This makes it possible for unauthenticated attackers to view arbitrary posts (e.g., unpublished or protected) via the ICS export feature. WordPress EventON Calendar plugin version 4.4 suffers from an insecure direct object reference vulnerability related to posting. • https://www.exploit-db.com/exploits/51659 http://packetstormsecurity.com/files/173992/WordPress-EventON-Calendar-4.4-Insecure-Direct-Object-Reference.html https://wpscan.com/vulnerability/72d80887-0270-4987-9739-95b1a178c1fd • CWE-639: Authorization Bypass Through User-Controlled Key •
CVSS: 5.3EPSS: 4%CPEs: 1EXPL: 2CVE-2023-2796 – EventON < 2.1.2 - Unauthenticated Event Access
https://notcve.org/view.php?id=CVE-2023-2796
The EventON WordPress plugin before 2.1.2 lacks authentication and authorization in its eventon_ics_download ajax action, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id. The EventON plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the eventon_ics_download function in versions up to, and including, 2.1. This makes it possible for unauthenticated attackers to view private or protected events. WordPress EventON Calendar plugin version 4.4 suffers from an insecure direct object reference vulnerability. • https://www.exploit-db.com/exploits/51658 http://packetstormsecurity.com/files/173984/WordPress-EventON-Calendar-4.4-Insecure-Direct-Object-Reference.html https://wpscan.com/vulnerability/e9ef793c-e5a3-4c55-beee-56b0909f7a0d • CWE-862: Missing Authorization •