Unscored CVE-2017-1002026 EUVD-2017-1641GHSA-rvvr-r24x-gg3r

Vulnerability in wordpress plugin Event Expresso Free v3.1.37.11.L, The function edit_event_category does not sanitize user-supplied input …

Published Sep 14, 2017 · Updated Sep 16, 2024 · Assigned by larry_cashdollar

Vendor: Event Espresso Product: Event Expresso Free Category: Web / CMS

Description

Vulnerability in wordpress plugin Event Expresso Free v3.1.37.11.L, The function edit_event_category does not sanitize user-supplied input via the $id parameter before passing it into an SQL statement.

Affected products

Vendor	Product	Affected	Fixed
Event Espresso	Event Expresso Free	unspecified – < 3.1.37.11.L	3.1.37.11.L

References

https://wordpress.org/plugins/event-espresso-free/
http://www.vapidlabs.com/advisory.php?v=197