52 matches found
WordPress Display Eventbrite Events plugin < 4.4.8 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Display Eventbrite Events plugin versions 4.4.8. Solution Update the WordPress Display Eventbrite Events plugin to the latest available version at least 4.4.8...
WordPress Show Eventbrite Events – Event Feed for Eventbrite plugin < 1.0.7 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Show Eventbrite Events – Event Feed for Eventbrite plugin versions 1.0.7. Solution Update the WordPress Show Eventbrite Events – Event Feed for Eventbrite plugin to the latest available version at leas...
WordPress Display Eventbrite Events plugin < 4.4.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Display Eventbrite Events plugin versions 4.4.8. Solution Update the WordPress Display Eventbrite Events plugin to the latest available version at least 4.4.8...
eventbrite.com XSS vulnerability
Open Bug Bounty ID: OBB-639099 Description| Value ---|--- Affected Website:| eventbrite.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Ticketfly website hacked & offline after hacker leaks customer data
By Carolina Eventbrite-owned San Francisco, California based ticket distribution service Ticketfly's website This is a post from HackRead.com Read the original post: Ticketfly website hacked & offline after hacker leaks customer data...
CVE-2015-5485
Cross-site scripting XSS vulnerability in the Event Import page import-eventbrite-events.php in the Modern Tribe Eventbrite Tickets plugin before 3.10.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "error" parameter to wp-admin/edit.php...
CVE-2015-5485: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Event Import page import-eventbrite-events.php in the Modern Tribe Eventbrite Tickets plugin before 3.10.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "error" parameter to wp-admin/edit.php...
PT-2015-6938
Name of the Vulnerable Software and Affected Versions Modern Tribe Eventbrite Tickets plugin versions prior to 3.10.2 Description The issue is related to a cross-site scripting XSS vulnerability in the Event Import page. This vulnerability allows remote attackers to inject arbitrary web script or...
WordPress Plugin Eventbrite Tickets Cross-Site Scripting Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Eventbrite Tickets. The vulnerability stems from a failur...
The Events Calender: Eventbrite Tickets 3.9.6 Cross Site Scripting
Details ================ Software: The Events Calendar: Eventbrite Tickets Version: 3.9.6 Homepage: https://theeventscalendar.com/product/wordpress-eventbrite-tickets/ Advisory report:...
WordPress Modern Tribe Eventbrite Tickets Plugin <= 3.10.1 - XSS
This vulnerability is in the Event Import page. It allows an attacker to inject arbitrary web script or HTML via the "error" parameter to wp-admin/edit.php. Solution Update the plugin...
Unfixed XSS vulnerability at www.eventbrite.com
Security researcher jjbutler88, has submitted on 07/02/2009 a cross-site-scripting XSS vulnerability affecting www.eventbrite.com, which at the time of submission ranked 5852 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/06/2009. It is...