Beveiligingsadvies

CVE-2026-14819

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-28 06:00:01

Laatst bijgewerkt 2026-07-28 13:25:36

Toegewezen door WPScan

CVSS-score 3.5

Status PUBLISHED

Beschrijving

The Event Tickets and Registration WordPress plugin before 5.28.4 does not properly escape event titles before outputting them in a ticket history log, allowing users with the Editor role and above to perform Stored Cross-Site Scripting attacks that execute against higher-privileged users on multisite installations.

← Alle CVE's bekijken Bekijk op cve.org ↗