597 matches found
CVE-2013-7478
The CVE-2013-7478 entry concerns the WordPress events-manager plugin (versions prior to 5.5). It describes a stored/reflected XSS vulnerability in the EM_Ticket::get_post function, enabling client-side script execution. Affected product/component: events-manager WordPress plugin; root cause: XSS ...
CVE-2013-7477
The CVE-2013-7477 entry concerns the WordPress Events Manager plugin, with an XSS flaw in the booking form present in versions prior to 5.5.2. Affected software: events-manager plugin for WordPress; vulnerable component: booking form input handling. Root cause per sources is an XSS vulnerability,...
CVE-2013-7477
The events-manager plugin before 5.5.2 for WordPress has XSS in the booking form...
PT-2019-7028 · WordPress · Events Manager
Name of the Vulnerable Software and Affected Versions: events-manager plugin versions prior to 5.3.9 Description: The issue concerns a Cross-Site Scripting XSS flaw in the search form field of the events-manager plugin for WordPress. Recommendations: For versions prior to 5.3.9, update to version...
PT-2019-7029 · WordPress · Events Manager
Name of the Vulnerable Software and Affected Versions: events-manager plugin versions prior to 5.3.6.1 Description: The issue affects the events-manager plugin for WordPress, allowing XSS attacks via the booking form and admin areas. Recommendations: For versions prior to 5.3.6.1, update to versi...
PT-2019-7026 · WordPress · Events Manager
Name of the Vulnerable Software and Affected Versions: events-manager plugin versions prior to 5.5.2 Description: The issue concerns a cross-site scripting XSS flaw in the booking form of the events-manager plugin. This type of flaw allows attackers to inject malicious scripts into the website,...
CVE-2012-6716: Improper Neutralization of Input During Web Page Generation
The events-manager plugin before 5.1.7 for WordPress has XSS via JSON call links...
CVE-2013-7480: Improper Neutralization of Input During Web Page Generation
The events-manager plugin before 5.3.6.1 for WordPress has XSS via the booking form and admin areas...
CVE-2013-7479: Improper Neutralization of Input During Web Page Generation
The events-manager plugin before 5.3.9 for WordPress has XSS in the search form field...
CVE-2013-7478: Improper Neutralization of Input During Web Page Generation
The events-manager plugin before 5.5 for WordPress has XSS via EMTicket::getpost...
CVE-2013-7477: Improper Neutralization of Input During Web Page Generation
The events-manager plugin before 5.5.2 for WordPress has XSS in the booking form...
PT-2019-7027 · WordPress · Events Manager
Name of the Vulnerable Software and Affected Versions: events-manager plugin versions prior to 5.5 Description: The issue concerns a cross-site scripting XSS flaw. It affects the events-manager plugin for WordPress, specifically via the EM Ticket::get post function. Recommendations: For versions...
PT-2019-6824 · WordPress · Events Manager
Name of the Vulnerable Software and Affected Versions: events-manager plugin versions prior to 5.1.7 Description: The issue concerns a cross-site scripting XSS vulnerability via JSON call links. This type of vulnerability allows an attacker to inject malicious scripts into a website, potentially...
CVE-2015-9300
The events-manager plugin before 5.5.7 for WordPress has multiple XSS issues...
CVE-2015-9299
The events-manager plugin before 5.5.7.1 for WordPress has DOM XSS...
CVE-2015-9298
The events-manager plugin before 5.6 for WordPress has code injection...
CVE-2015-9297
The events-manager plugin before 5.6 for WordPress has XSS...
Cross site scripting
The events-manager plugin before 5.6 for WordPress has XSS...