CVE-2024-13802

The Bandsintown Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bandsintownevents' shortcode in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-13802

The Bandsintown Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bandsintownevents' shortcode in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-13802 Bandsintown Events <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Bandsintown Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bandsintownevents' shortcode in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-13802

CVE-2024-13802 – Bandsintown Events plugin for WordPress : All versions up to 1.3.1 are affected by a Stored XSS in the bandsintown_events shortcode due to insufficient input sanitization and output escaping. Exploitation requires authenticated access at contributor level or higher, enabling inje...

CVE-2024-13802 Bandsintown Events <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Bandsintown Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bandsintownevents' shortcode in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

WordPress plugin Bandsintown Events 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

PT-2025-7393 · WordPress · Bandsintown Events

Name of the Vulnerable Software and Affected Versions: Bandsintown Events plugin for WordPress versions up to, and including, 1.3.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'bandsintown events' shortcode due to insufficient input sanitization and output...

WordPress Bandsintown Events plugin <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by yudha in WordPress Plugin Bandsintown Events versions = 1.3.1...

bandsintown.com Cross Site Scripting vulnerability OBB-2768301

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bandsintown.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1144464 Security Researcher ELProfesor Helped patch 2794 vulnerabilities Received 8 Coordinated Disclosure badges Received 106 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting bandsintown.com websit...

bandsintown.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1102895 Security Researcher Broly157 Helped patch 1605 vulnerabilities Received 7 Coordinated Disclosure badges Received 15 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting bandsintown.com website a...

bandsintown.com XSS vulnerability

Open Bug Bounty ID: OBB-641200 Description| Value ---|--- Affected Website:| bandsintown.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bandsintown.com XSS vulnerability

Open Bug Bounty ID: OBB-607607 Description| Value ---|--- Affected Website:| bandsintown.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tourdates.bandsintown.com XSS vulnerability

Open Bug Bounty ID: OBB-549689 Description| Value ---|--- Affected Website:| tourdates.bandsintown.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated...

bandsintown.com XSS vulnerability

Open Bug Bounty ID: OBB-539661 Description| Value ---|--- Affected Website:| bandsintown.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

promoters.bandsintown.com XSS vulnerability

Vulnerable URL: https://promoters.bandsintown.com/?utmsource="// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated...

Bandsintown Concerts - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Bandsintown Concerts published at the 'play' market has multiple vulnerabilities...

bandsintown.com XSS vulnerability

Open Bug Bounty ID: OBB-82995 Description| Value ---|--- Affected Website:| bandsintown.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

bandsintown.com XSS vulnerability

Open Bug Bounty ID: OBB-52813 Description| Value ---|--- Affected Website:| bandsintown.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...