CVE-2020-26153

A cross-site scripting (XSS) vulnerability in wp-content/plugins/event-espresso-core-reg/admin_pages/messages/templates/ee_msg_admin_overview.template.php in the Event Espresso Core plugin before 4.10.7.p for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter.

• CWE-79

• https://github.com/eventespresso/event-espresso-core/compare/4.10.6.p...4.10.7.pPatch, Third Party Advisory
• https://labs.nettitude.com/blog/cve-2020-26153-event-espresso-core-cross-site-scripting/Exploit, Third Party Advisory
• https://github.com/eventespresso/event-espresso-core/compare/4.10.6.p...4.10.7.pPatch, Third Party Advisory
• https://labs.nettitude.com/blog/cve-2020-26153-event-espresso-core-cross-site-scripting/Exploit, Third Party Advisory

Published

Jul 13, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-26146An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 dev…5.3
• CVE-2020-26147An issue was discovered in the Linux kernel 5.8.9. The WEP, …5.4
• CVE-2020-26148md_push_block_bytes in md4c.c in md4c 0.4.5 allows attackers…7.5
• CVE-2020-26149NATS nats.js before 2.0.0-209, nats.ws before 1.0.0-111, and…7.5
• CVE-2020-2615Vulnerability in the Enterprise Manager Base Platform produc…6
• CVE-2020-26150info.php in Logaritmo Aware CallManager 2012 allows remote a…7.5
• CVE-2020-26154url.cpp in libproxy through 0.4.15 is prone to a buffer over…9.8
• CVE-2020-26155Multiple files and folders in Utimaco SecurityServer 4.20.0.…7.8
• CVE-2020-26156Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-26157Leanote Desktop through 2.6.2 allows XSS because a note's ti…9.6
• CVE-2020-26158Leanote Desktop through 2.6.2 allows XSS because a note's ti…9.6
• CVE-2020-26159Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…