CVE Database /
CVE-2018-0576
CVE · Medium
CVE-2018-0576 — Events Manager – Calendar, Bookings, Tickets, and more! [events-manager] < 5.9
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2018-0576
|
Events Manager – Calendar, Bookings, Tickets, and more! [events-manager] < 5.9 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
5.4
|
< 5.9
|
5.9 |
2018-04-27 |
—
|
CVE-2018-0576
The Events Manager plugin for WordPress contains a stored cross-site scripting flaw in versions before 5.9 that allows attackers to inject malicious scripts into the application. The vulnerability exists within the plugin's handling of user input and fails to properly sanitize data before storage. An attacker could exploit this issue to execute arbitrary JavaScript code in the browsers of other users who view affected content. This flaw impacts all installations running vulnerable versions of the plugin.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings