CVE-2017-1002026

Vulnerability in wordpress plugin Event Expresso Free v3.1.37.11.L, The function editeventcategory does not sanitize user-supplied input via the $id parameter before passing it into an SQL statement...

PT-2017-11015

Name of the Vulnerable Software and Affected Versions Event Expresso Free version 3.1.37.11.L Description The issue concerns a lack of input sanitization in the edit event category function, which passes user-supplied input via the $id parameter into an SQL statement without proper validation...