VULNERABILITY INTELLIGENCE

CVE-2023-52384

CVSS score5.5 MEDIUM

EPSS probability0.49%

CISA KEVNot currently listed

Published2024-05-14

Last modified2026-06-17

Description

The EventPrime WordPress plugin before 3.2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to an HTML Injection on the plugin in the search area of the website.