Quick Event Manager Security Vulnerabilities and Issues — Quick Event Manager CVE List

FullworkspluginsQuick Event Manager

4 matches found

CVE•added 2023/01/20 12:0 a.m.•87 views

CVE-2023-23491

CVE-2023-23491 : The Quick Event Manager WordPress Plugin (versions before 9.7.5) is affected by a reflected cross-site scripting (XSS) vulnerability in the category parameter of the qem_ajax_calendar action. Unauthenticated attackers can inject JavaScript via this parameter, potentially compromi...

6.1CVSS5.8AI score0.11089EPSS

Web

CVE•added 2023/03/28 8:4 a.m.•50 views

CVE-2022-46863

The CVE-2022-46863 entry describes a stored XSS vulnerability in the WordPress plugin Fullworks Quick Event Manager (versions = 9.6.5 to mitigate the issue.

5.9CVSS4.9AI score0.00207EPSS

CVE•added 2023/03/01 12:33 p.m.•47 views

CVE-2023-23974

The CVE-2023-23974 entry details a CSRF vulnerability in the WordPress plugin Fullworks Quick Event Manager

5.4CVSS5.6AI score0.00097EPSS

CVE•added 2023/04/06 5:17 a.m.•41 views

CVE-2023-23979

The CVE-2023-23979 entry concerns the WordPress Quick Event Manager plugin (Fullworks) with an unauthenticated Stored Cross-Site Scripting (XSS) vulnerability affecting versions prior to 9.7.5. The issue is tied to improper handling of input (e.g., the "yourname" parameter) leading to XSS. No exp...

7.1CVSS5.8AI score0.00199EPSS