CVE-2026-42686

HighCVSS 7.1

Published: 15/06/2026(UTC)Updated: 15/06/2026(UTC)Translated: 16/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

27th percentile - higher than 27% of all known CVEs

There is a Cross Site Scripting (XSS) vulnerability affecting subscribers in EventPrime versions <= 4.3.2.1.

An attacker could exploit this vulnerability to inject malicious JavaScript code, potentially leading to user data theft or session hijacking.

It is recommended to upgrade to the latest version of EventPrime to mitigate this vulnerability.

Original NVD description (English source)

Subscriber Cross Site Scripting (XSS) in EventPrime <= 4.3.2.1 versions.