PT-2018-8934 · WordPress · Events Manager

Daichi Takaki

·

CVE-2018-0576

·

Published

2018-05-14

·

Updated

2024-10-08

CVSS v3.1

5.4

Medium

VectorAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Events Manager plugin versions prior to 5.9 for WordPress
Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to cross-site scripting.
Recommendations For versions prior to 5.9, update to version 5.9 or later to resolve the issue.

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-0576

Affected Products

Events Manager