SZB-64dd0645ec
EUVD lists unauthenticated XSS in Jyothis Joy Eventer
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Jyothis Joy
- Product
- Eventer
- First seen
Summary
The EU Vulnerability Database (EUVD) entry EUVD-2026-112944, relayed in a Mastodon post, describes an unauthenticated cross-site scripting flaw in Eventer versions 0.1.1 and earlier. The entry gives a CVSS v3.1 score of 7.1 and was published 2026-10-29 and updated 2026-10-30.
If you use Jyothis Joy
Update Eventer to a version later than 0.1.1.
Check the developer's listing for the fixed version.
Review event pages for signs of injected scripts.
What the sources say 1
· Mastodon: “Unauthenticated Cross Site Scripting (XSS) in Eventer <= 0.1.1 versions.” Source