CVE-2026-60119 | HiEventsDev Hi.Events up to 1.10.x Event JSON.stringify event title cross site scripting

July 14, 2026 Yanac

A vulnerability was found in HiEventsDev Hi.Events up to 1.10.x. It has been classified as problematic. Affected is the function JSON.stringify of the component Event Handler. This manipulation of the argument event title causes cross site scripting.

This vulnerability is registered as CVE-2026-60119. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More