CVE-2026-123480

Published 11 November 2026 · tracked since 12 November 2026

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fullworks Plugins Display Eventbrite Events widget-for-eventbrite-api allows Stored XSS.This issue affects Display Eventbrite Events: from n/a through 6.9.1.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-120151 HIGH 8.8
• CVE-2026-120150 HIGH 8.8
• CVE-2026-120149 HIGH 8.8
• CVE-2026-120147 HIGH 8.8
• CVE-2026-120145 HIGH 8.8
• CVE-2026-120144 HIGH 8.8
• CVE-2026-120143 HIGH 8.8
• CVE-2026-120142 HIGH 8.8
• CVE-2026-120141 HIGH 8.8
• CVE-2026-120139 HIGH 8.8

→ Open the live CVE board · all tools