漏洞描述
Wordpress EventON Calendar 3.0.5 is vulnerable to cross-site scripting because it allows addons/?q= XSS via the search field.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
github.comhttps://github.com/mustgundogdu/Research/tree/main/EventON_PLUGIN_XSS↗www.myeventon.comhttps://www.myeventon.com/news/↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2020-29395↗packetstormsecurity.comhttp://packetstormsecurity.com/files/160282/WordPress-EventON-Calendar-3.0.5-Cross-Site-Scripting.html↗github.comhttps://github.com/ARPSyndicate/kenzer-templates↗