CVE-2023-35884

HighCVSS 7.1

Published: 20/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

27th percentile - higher than 27% of all known CVEs

Summary

The EventPrime plugin versions up to 3.0.5 contain an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this flaw to inject malicious scripts.

Risk Assessment

The organization may be exposed to user data theft or other attacks that could lead to loss of reputation and customer trust.

Recommendation

It is recommended to update the EventPrime plugin to the latest version to mitigate this vulnerability.

Other vulnerabilities in EventPrime plugin

CVE-2023-33326High
The EventPrime plugin versions up to 2.8.6 have an unauthenticated reflected XSS (Cross-Site Scripting) vulnerability. An attacker can exploit this flaw to inject malicious scripts in the user's context.

Original NVD description (English source)

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in EventPrime plugin <= 3.0.5 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS