← Back

Rsvpmaker Excel

rsvpmaker_excel

Vendor: Carrcommunications • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-38337
1Carrcommunications
1Rsvpmaker Excel
Nov 21, 2024
Sep 10, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The RSVPMaker Excel WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $_SERVER["PHP_SELF"] value in the ~/phpexcel/PHPExcel/Shared/JAMA/docs/download.php file which allows attackers to i...Show more
The RSVPMaker Excel WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $_SERVER["PHP_SELF"] value in the ~/phpexcel/PHPExcel/Shared/JAMA/docs/download.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.1.Show less