← Database

CVE-2023-23491

MEDIUM CVSS: 6.1 Published: 2023-01-20 Modified: 2026-06-17

Description

The Quick Event Manager WordPress Plugin, version < 9.7.5, is affected by a reflected cross-site scripting vulnerability in the 'category' parameter of its 'qem_ajax_calendar' action.

Affected Platforms

Fullworksplugins Quick Event Manager

Weakness Type

CWE-79, CWE-79

References