Threats tagged 'ghsa-9cx9-23hh-j484'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.2	CVE-2025-11995The Community Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via event details parameter in High7.22025-11-01GCVE DatabaseCVE-2025-11995 The Community Events plugin for WordPress contains a stored cross-site scripting (XSS) vulnerability in the event details parameter affecting all versions up to and including 1.5.2. This vulnerability allows unauthenticated attackers to inject arbitrary scripts that execute when users view the affected pages. Report on CVE-2025-11995 Vulnerability CWE-79 #ghsa-9cx9-23hh-j484	GCVE Database	2025-11-01

Page 1 of 1