PT-2023-14546 · Unknown · Yannick Lefebvre Community Events
CVSS v3.1
4.8
Medium
| Vector | AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Yannick Lefebvre Community Events plugin versions <= 1.4.8
Description
The issue is related to a Stored Cross-Site Scripting vulnerability that requires authentication with admin+ privileges.
Recommendations
For versions <= 1.4.8, update to a version greater than 1.4.8 to resolve the issue.
At the moment, there is no information about other specific mitigation measures for this vulnerability.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Yannick Lefebvre Community Events