CVE-2023-5238

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

The EventPrime WordPress plugin before 3.2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to an HTML Injection on the plugin in the search area of the website.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Oct 31, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-523804.3Vulnerability of improper access control in the email module.Successful exploitation of this vulnerability may affect service confidentialit CVE-2023-523819.8Script injection vulnerability in the email module.Successful exploitation of this vulnerability may affect service confidentiality, integri CVE-2023-523835.5Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2023-523845.5Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2023-523856.2Out-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this vulnerability will affect availability.CVE-2023-523867.5Out-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this vulnerability will affect availability.CVE-2023-523877.5Resource reuse vulnerability in the GPU module. Successful exploitation of this vulnerability may affect service confidentiality.CVE-2023-523887.5Permission control vulnerability in the clock module. Impact: Successful exploitation of this vulnerability will affect availability.CVE-2023-523899.8UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::conver CVE-2023-52397.5The Security & Malware scan by CleanTalk WordPress plugin before 2.121 retrieves client IP addresses from potentially untrusted headers, all CVE-2023-52407.5Improper access control in PAM propagation scripts in Devolutions Server 2023.2.8.0 and ealier allows an attack with permission to manage PA CVE-2023-52418.1The AI ChatBot for WordPress is vulnerable to Directory Traversal in versions up to, and including, 4.8.9 as well as 4.9.2 via the qcld_open