WordPress · Eventify Wordpress Plugin · CVE-2022-4110
**Name of the Vulnerable Software and Affected Versions**
Eventify WordPress plugin versions prior to 2.1.1 is not specified, however, it is mentioned that versions through 2.1 are affected, so the correct output is:
Eventify WordPress plugin versions through 2.1
**Description**
The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capability is disallowed, for example, in a multisite setup.
**Recommendations**
For Eventify WordPress plugin versions through 2.1, update to a version later than 2.1 to resolve the issue.