2 matches found
CVE-2017-14760
SQL Injection exists in /includes/event-management/index.php in the event-espresso-free aka Event Espresso Lite plugin v3.1.37.12.L for WordPress via the recurrenceid parameter to /wp-admin/admin.php...
9.8CVSS5.8AI score0.0151EPSS
SaveExploits1References1
PT-2017-13674
Name of the Vulnerable Software and Affected Versions event-espresso-free plugin version 3.1.37.12.L Description A SQL Injection issue exists in the event-espresso-free plugin for WordPress. The issue is related to the recurrence id parameter in the /includes/event-management/index.php file, whic...
9.8CVSS0.0151EPSS
SaveExploits1References3
20