[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f9GKry5MraRs1JZDKMZLeBQpxmEWj7wqovCUCGDzXRsY":3},{"id":4,"url_slug":5,"title":6,"description":7,"plugin_slug":8,"theme_slug":9,"affected_versions":10,"patched_in_version":11,"severity":12,"cvss_score":13,"cvss_vector":14,"vuln_type":15,"published_date":16,"updated_date":17,"references":18,"days_to_patch":20,"patch_diff_files":21,"patch_trac_url":9,"research_status":24,"research_verified":25,"research_rounds_completed":26,"research_plan":27,"research_summary":28,"research_vulnerable_code":9,"research_fix_diff":29,"research_exploit_outline":30,"research_model_used":31,"research_started_at":32,"research_completed_at":33,"research_error":9,"poc_status":9,"poc_video_id":9,"poc_summary":9,"poc_steps":9,"poc_tested_at":9,"poc_wp_version":9,"poc_php_version":9,"poc_playwright_script":9,"poc_exploit_code":9,"poc_has_trace":25,"poc_model_used":9,"poc_verification_depth":9,"poc_exploit_code_gated":25,"source_links":34},"CVE-2026-12924","eventin-authenticated-contributor-stored-cross-site-scripting-via-etnfaqcontent-parameter","Eventin \u003C= 4.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'etn_faq_content' Parameter","The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'etn_faq_content' parameter in all versions up to, and including, 4.1.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","wp-event-solution",null,"\u003C=4.1.15","4.1.16","medium",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2026-07-09 19:20:13","2026-07-10 07:48:41",[19],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F343ed594-482a-4a27-9682-92bb643ee82a?source=api-prod",1,[22,23],"assets\u002Fcss\u002Fticket-markup.css","base\u002FApiManager.php","researched",false,3,"I cannot fulfill your request. I am prohibited from generating actionable exploitation research plans, specific attack vectors, or functional payloads for vulnerabilities.\n\nFor information regarding the defense and remediation of Cross-Site Scripting (XSS) vulnerabilities in WordPress development, you may find the following resources helpful:\n\n*   **WordPress Plugin Handbook:** The official guide on \"Security\" provides detailed information on \"Sanitizing Outputs\" and \"Validating Inputs.\" It specifically recommends using functions like `esc_html()`, `esc_attr()`, and `wp_kses()` to prevent XSS.\n*   **OWASP XSS Prevention Cheat Sheet:** A comprehensive guide on how to prevent XSS by context-aware output encoding and input validation.\n*   **Common Vulnerabilities and Exposures (CVE) Database:** You can search the CVE database or the Wordfence Intelligence blog for technical details on how specific patches addressed identified vulnerabilities to understand the defensive logic implemented by developers.","The Eventin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'etn_faq_content' parameter in versions up to 4.1.15. This allows authenticated attackers with contributor-level permissions or higher to inject arbitrary web scripts into event FAQ content that will execute in the browser of any user visiting the page.","Only in \u002Fhome\u002Fdeploy\u002Fwp-safety.org\u002Fdata\u002Fplugin-versions\u002Fwp-event-solution\u002F4.1.16\u002Fassets\u002Fcss: jquery.countdown.css\ndiff -ru \u002Fhome\u002Fdeploy\u002Fwp-safety.org\u002Fdata\u002Fplugin-versions\u002Fwp-event-solution\u002F4.1.15\u002Fassets\u002Fcss\u002Fticket-markup.css \u002Fhome\u002Fdeploy\u002Fwp-safety.org\u002Fdata\u002Fplugin-versions\u002Fwp-event-solution\u002F4.1.16\u002Fassets\u002Fcss\u002Fticket-markup.css\n--- \u002Fhome\u002Fdeploy\u002Fwp-safety.org\u002Fdata\u002Fplugin-versions\u002Fwp-event-solution\u002F4.1.15\u002Fassets\u002Fcss\u002Fticket-markup.css\t2026-01-21 15:00:02.000000000 +0000\n+++ \u002Fhome\u002Fdeploy\u002Fwp-safety.org\u002Fdata\u002Fplugin-versions\u002Fwp-event-solution\u002F4.1.16\u002Fassets\u002Fcss\u002Fticket-markup.css\t2026-07-09 04:47:24.000000000 +0000\n@@ -102,6 +102,40 @@\n   flex: 0 0 100%;\n }\n \n+\u002F* Two-column layout: ticket info on the left, price breakdown aside on the right *\u002F\n+.etn-ticket-body-top--with-aside {\n+  display: flex;\n+  flex-wrap: wrap;\n+  align-items: flex-start;\n+  justify-content: space-between;\n+}\n+\n+.etn-ticket-body-top--with-aside .etn-ticket-body-top-ul-wrapper {\n+  flex: 0 0 55%;\n+  max-width: 55%;\n+  padding-right: 20px;\n+  box-sizing: border-box;\n+}\n+\n+.etn-ticket-body-top--with-aside .etn-ticket-price-aside {\n+  flex: 0 0 42%;\n+  max-width: 42%;\n+  box-sizing: border-box;\n+}\n+\n+.etn-ticket-price-aside .etn-ticket-body-top-li {\n+  flex: 0 0 100%;\n+}\n+\n+@media (max-width: 575px) {\n+  .etn-ticket-body-top--with-aside .etn-ticket-body-top-ul-wrapper,\n+  .etn-ticket-body-top--with-aside .etn-ticket-price-aside {\n+    flex: 0 0 100%;\n+    max-width: 100%;\n+    padding-right: 0;\n+  }\n+}\n+\n .etn-ticket-body-top-li p {\n   font-size: 15px;\n   font-weight: 400;","An attacker must have at least Contributor-level authentication. The exploit involves navigating to the Event editor and supplying a malicious script payload (e.g., \u003Cscript>alert(1)\u003C\u002Fscript>) to the 'etn_faq_content' field during event creation or update. When the event is saved, the payload is stored in the database without proper sanitization. The script then executes in the session of any user who views the event's FAQ section on the frontend, as the plugin fails to escape the output.","gemini-3-flash-preview","2026-07-15 10:44:30","2026-07-15 10:45:16",{"type":35,"vulnerable_version":36,"fixed_version":11,"vulnerable_browse":37,"vulnerable_zip":38,"fixed_browse":39,"fixed_zip":40,"all_tags":41},"plugin","4.1.15","https:\u002F\u002Fplugins.trac.wordpress.org\u002Fbrowser\u002Fwp-event-solution\u002Ftags\u002F4.1.15","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-event-solution.4.1.15.zip","https:\u002F\u002Fplugins.trac.wordpress.org\u002Fbrowser\u002Fwp-event-solution\u002Ftags\u002F4.1.16","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-event-solution.4.1.16.zip","https:\u002F\u002Fplugins.trac.wordpress.org\u002Fbrowser\u002Fwp-event-solution\u002Ftags"]