CVE-2023-33326

30th percentile - higher than 30% of all known CVEs

The EventPrime plugin versions up to 2.8.6 have an unauthenticated reflected XSS (Cross-Site Scripting) vulnerability. An attacker can exploit this flaw to inject malicious scripts in the user's context.

The organization is at risk of attacks that could lead to user data theft or session hijacking. Exploitation of this vulnerability may also impact the company's reputation.

It is recommended to update the EventPrime plugin to the latest version to mitigate this vulnerability. Additionally, conducting a security audit of the application is advisable.