CVE-2024-43138

Name of the Vulnerable Software and Affected Versions Event Manager for WooCommerce versions n/a through 4.2.1

Description The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability, in MagePeople Team Event Manager for WooCommerce. This allows PHP Local File Inclusion.

Recommendations For versions n/a through 4.2.1, update to a version later than 4.2.1 to resolve the issue. At the moment, there is no information about additional mitigation measures.