Description The events-manager plugin before 5.5.2 for WordPress has XSS in the booking form. References https://wordpress.org/plugins/events-manager/#developers