CVE-2020-29395

6.1MEDIUM

Key Information:

Vendor
Wordpress
Status
Eventon
Vendor
CVE Published:
30 November 2020

Summary

The EventON plugin through 3.0.5 for WordPress allows addons/?q= XSS via the search field.

References

https://github.com/mustgundogdu/Research/tree/main/EventO...
x_refsource_MISC
https://www.myeventon.com/news/
x_refsource_MISC
http://packetstormsecurity.com/files/160282/WordPress-Eve...
x_refsource_MISC

EPSS Score

7% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.