CVE-2025-3527 | EventON Pro Plugin up to 4.9.6 on WordPress Setting settings.js cross site scripting

A vulnerability classified as problematic was found in EventON Pro Plugin up to 4.9.6 on WordPress. This vulnerability affects unknown code in the library assets/lib/settings/settings.js of the component Setting Handler. The manipulation leads to cross site scripting.

This vulnerability was named CVE-2025-3527. The attack can be initiated remotely. There is no exploit available.