CVE-2023-28422

Name of the Vulnerable Software and Affected Versions MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce versions 3.8.6 and earlier

Description The issue is related to a Stored Cross-site Scripting (XSS) vulnerability that requires authentication with admin+ privileges. This vulnerability affects the MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce.

Recommendations For versions 3.8.6 and earlier, update to a version later than 3.8.6 to resolve the issue. At the moment, there is no information about additional mitigation measures for this specific vulnerability.