CVE-2023-23979

Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Event Manager plugin <= 9.7.4 versions.

Score

CVSS 3.1 7.1 High

Status

Modified - audit@patchstack.com

Published

2023-04-06

Last modified

2026-04-28

Weaknesses

CWE-79

Affected products

• Quick Event Manager (Fullworks)
• Quick Event Manager (Fullworksplugins)

References

• https://patchstack.com/database/vulnerability/quick-event-manager/wordpress-quick-event-manager-plugin-9-7-4-cross-site…