title: WP FEvents Book <= 0.46 - Subscriber+ Stored XSS
description: The WP FEvents Book WordPress plugin through 0.46 does not sanitise and escape some parameters, which could allow any authenticated users, such as subscriber to perform Cross-Site Scripting attacks
problem types: CWE-79 Cross-Site Scripting (XSS)
affected:
{
vendor: Unknown
product: WP FEvents Book
versions:
status: affected, versionType: custom, version: 0, lessThanOrEqual: 0.46
defaultStatus: affected
collectionURL: https://wordpress.org/plugins
}