CVE-2023-28660

Name of the Vulnerable Software and Affected Versions Events Made Easy WordPress Plugin version <= 2.3.14

Description The issue is an authenticated SQL injection vulnerability. It affects the search name parameter in the eme recurrences list action.

Recommendations For Events Made Easy WordPress Plugin version <= 2.3.14, update to a version greater than 2.3.14 to resolve the issue. As a temporary workaround, consider restricting access to the eme recurrences list action to minimize the risk of exploitation. Avoid using the search name parameter in the affected action until the issue is resolved.