WordPress WP Event Manager Cross-Site Scripting Vulnerability

WordPress is the Wordpress Foundation’s suite of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress WP Event Manager has a cross-site scripting vulnerability that stems from the plugin’s failure to escape output fields when they are set in the editor, which can be exploited by attackers to perform cross-site scripting attacks.