CVE-2026-81791

EventON versions up to 2.5.7 are vulnerable to a Subscriber Cross Site Scripting (XSS) flaw, which could allow attackers to inject malicious scripts into web pages viewed by users. This vulnerability poses a medium risk, potentially leading to unauthorized access to sensitive user information or session hijacking. Organizations using affected versions should prioritize patching to mitigate the risk of exploitation.