K3M4N9I

**Name of the Vulnerable Software and Affected Versions** Event Registration plugin versions 5.32 and earlier **Description** The issue allows remote attackers to execute arbitrary SQL commands via the `event id` parameter in a "register" action. **Recommendations** For versions 5.32 and earlier, update to a version later than 5.32 to resolve the issue.