CVE-2023-7170

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

The EventON-RSVP WordPress plugin before 2.9.5 does not sanitise and escape some parameters before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Unknown	EventON-RSVP	< 2.9.5

References

https://wpscan.com/vulnerability/218fb3af-3a40-486f-8ea9-80211a986fb3/Exploit, Third Party Advisory
https://wpscan.com/vulnerability/218fb3af-3a40-486f-8ea9-80211a986fb3/Exploit, Third Party Advisory

Timeline

Published: Jan 22, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-71714.8A vulnerability was found in Novel-Plus up to 4.2.0. It has been declared as problematic. Affected by this vulnerability is an unknown funct CVE-2023-71727.2A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is so CVE-2023-71735.4A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part o CVE-2023-71747.1The aBitGone CommentSafe WordPress plugin through 1.0.0 does not have CSRF check in some places, and is missing sanitisation as well as esca CVE-2023-71759.8A vulnerability was found in Campcodes Online College Library System 1.0. It has been rated as critical. Affected by this issue is some unkn CVE-2023-71768.8A vulnerability classified as critical has been found in Campcodes Online College Library System 1.0. This affects an unknown part of the fi CVE-2023-71778.8A vulnerability classified as critical was found in Campcodes Online College Library System 1.0. This vulnerability affects unknown code of CVE-2023-71787.2A vulnerability, which was classified as critical, has been found in Campcodes Online College Library System 1.0. This issue affects some un CVE-2023-71798.8A vulnerability, which was classified as critical, was found in Campcodes Online College Library System 1.0. Affected is an unknown function CVE-2023-71804.3A vulnerability has been found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this vulnerability is an unknown functio CVE-2023-71817.2A vulnerability was found in Muyun DedeBIZ up to 6.2.12 and classified as critical. Affected by this issue is some unknown functionality of CVE-2023-71838.8A vulnerability has been found in 7-card Fakabao up to 1.0_build20230805 and classified as critical. Affected by this vulnerability is an un