Threats tagged 'ghsa-cp66-q964-28rx'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.5	CVE-2026-123480Fullworks · Cross-site Scripting Medium6.52026-11-11GCVE DatabaseCVE-2026-123480 A stored cross-site scripting (XSS) vulnerability exists in the Fullworks Display Eventbrite Events plugin (widget-for-eventbrite-api) up to version 6.9.1. This vulnerability results from improper neutralization of input during web page generation, allowing malicious scripts to be stored and executed in users' browsers. Report on CVE-2026-123480 Vulnerability CWE-79 #ghsa-cp66-q964-28rx	GCVE Database	2026-11-11

Page 1 of 1