cve/2020/CVE-2020-29395.md

CVE-2020-29395

Description

The EventON plugin through 3.0.5 for WordPress allows addons/?q= XSS via the search field.

POC

Reference

• http://packetstormsecurity.com/files/160282/WordPress-EventON-Calendar-3.0.5-Cross-Site-Scripting.html
• http://packetstormsecurity.com/files/160282/WordPress-EventON-Calendar-3.0.5-Cross-Site-Scripting.html

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/StarCrossPortal/scalpel
• https://github.com/anonymous364872/Rapier_Tool
• https://github.com/apif-review/APIF_tool_2024
• https://github.com/d4n-sec/d4n-sec.github.io
• https://github.com/youcans896768/APIV_Tool