Lucene search

Events Manager Security Vulnerabilities

cve

CVE-2018-9020

The Events Manager plugin before 5.8.1.2 for WordPress allows XSS via the events-manager.js mapTitle parameter in the Google Maps miniature.

5.4CVSS

5.2AI Score

0.001EPSS

2018-03-26 02:29 AM

cve

CVE-2020-35012

The Events Manager WordPress plugin before 5.9.8 does not sanitise and escape a parameter before using it in a SQL statement, leading to an SQL Injection

7.2CVSS

7.2AI Score

0.001EPSS

2021-12-01 11:15 PM

cve

CVE-2020-35037

The Events Manager WordPress plugin before 5.9.8 does not sanitise and escape some search parameter before outputing them in pages, which could lead to Cross-Site Scripting issues

6.1CVSS

6AI Score

0.001EPSS

2021-12-01 11:15 PM