CVE-2025-40638

A reflected Cross-Site Scripting XSS vulnerability has been found in Eventobot. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending him/her a malicious URL using the 'name' parameter in '/search-results'. This vulnerability can be exploited to steal...

PT-2026-24051

Name of the Vulnerable Software and Affected Versions Eventobot affected versions not specified Description A SQL injection issue exists in Eventobot. This allows an attacker to retrieve, create, update, and delete databases. The issue is located in the '/assets/php/calculate discount.php' file...