CVE-2013-7478

The events-manager plugin before 5.5 for WordPress has XSS via EMTicket::getpost...