CVE-2026-84848

HighCVSS 7.1

Published: 03/09/2026(UTC)Updated: 04/09/2026(UTC)Translated: 03/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

4th percentile - higher than 4% of all known CVEs

Unauthenticated Cross Site Scripting (XSS) in Quick Event Manager versions up to 9.17.

An attacker could inject malicious scripts into a victim's browser, potentially leading to session theft or other harmful actions.

Update to the latest version and implement input filtering and output encoding.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in Quick Event Manager <= 9.17 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS