Clapboiz

Researcher fromHPT Vietnam Corporation

#25439of 60,574

10.6Total CVSS

Vulnerabilities · 2

Medium

2

CVE-2026-124255

Events Made Easy

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Franky Events Made Easy events-made-easy allows Code Injection.This issue affects Events Made Easy: from n/a through 3.3.5.

CVE-2026-123183

Active Products Tables

An issue exists where the software fails to properly neutralize script-related HTML tags and does not validate values before executing the `do shortcode()` function. This allows unauthenticated attackers to perform code injection and execute arbitrary shortcodes.