A Cross-Site Scripting (XSS) vulnerability exists in Franky Events Made Easy (up to version 3.3.5) due to improper neutralization of script-related HTML tags. This flaw allows an attacker to inject code into web pages, potentially leading to limited confidentiality impact. The vulnerability has a CVSS 3.1 base score of 5.3, indicating medium severity. No public exploits or known active exploitation have been reported. No patch or remediation information is currently available.