WordPress Event Manager plugin跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in versions of the WordPress Event Manager plugin prior to 3.1.28, which stems from a failure to clean and escape searches in the event dashboard’s properties before exporting them back to the The vulnerability is caused by a failure to clean and escape searches before outputting them back to the properties of the event dashboard, which can be exploited to perform cross-site scripting attacks.