CVE Catalog
CVE-2025-62042
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.18%
6th percentile - higher than 6% of all known CVEs
Summary
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post. This issue affects Event post: from n/a through <= 5.10.3.
Risk Assessment
XSS attack may allow execution of malicious script in user's browser, theft of session cookies, or account takeover. May lead to website compromise.
Recommendation
Update Event post plugin to version higher than 5.10.3. If update is not possible, consider disabling the plugin.
Other vulnerabilities in Event post
Original NVD description (English source)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post.This issue affects Event post: from n/a through <= 5.10.3.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS