Description The events-manager plugin before 5.5 for WordPress has XSS via EM_Ticket::get_post. References https://wordpress.org/plugins/events-manager/#developers