Unscored CVE-2018-0576 EUVD-2018-1386GHSA-q7wv-qr74-h8j8

Cross-site scripting vulnerability in Events Manager plugin prior to version 5.9 for WordPress allows remote attackers to inject arbitrary …

Published May 14, 2018 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: netweblogic Product: Events Manager

Description

Cross-site scripting vulnerability in Events Manager plugin prior to version 5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
NetWebLogic	Events Manager	prior to version 5.9	—

References

https://wordpress.org/plugins/events-manager/#developers
JVN#85531148 third-party-advisory
https://wpvulndb.com/vulnerabilities/9609