2 matches found
CVE-2025-14945
The Events Manager - Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via event attribute values in all versions up to, and including, 7.3.3. This is due to insufficient input sanitization when storing attribute values using only wpunslash...
5.4CVSS0.00217EPSS
SaveExploits0References4
CVE-2025-14945: Improper Neutralization of Input During Web Page Generation
The Events Manager - Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via event attribute values in all versions up to, and including, 7.3.3. This is due to insufficient input sanitization when storing attribute values using only wpunslash...
5.4CVSS6AI score0.00217EPSS
SaveExploits0References2
20