CVE-2026-125781mediumCWE-79

CVE-2026-125781: medium-severity vulnerability in NOUS Ouvert Utile et Simple Event post

WordPress Event post plugin <= 6.1.2 - Cross Site Scripting (XSS) vulnerability

Published

Follow this CVE+ Monitor Event post

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

10Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NOUS Ouvert Utile et Simple Event post event-post allows Stored XSS.This issue affects Event post: from n/a through 6.1.2.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Affected products
NOUS Ouvert Utile et Simple · Event post
Related CVEs — NOUS Ouvert Utile et Simple Event post

In the same product, most dangerous first.

CVE-2026-107427MEDIUMWordPress Event post plugin <= 6.1.1 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2026-107432MEDIUMWordPress Event post plugin <= 6.1.1 - Broken Access Control vulnerabilityEPSS 0.1%