High · 7.1 CVE-2023-45637 EUVD-2023-49929GHSA-xh5x-756j-vhq8

WordPress EventPrime Plugin <= 3.1.5 is vulnerable to Cross Site Scripting (XSS)

Published Oct 24, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in EventPrime EventPrime – Events Calendar, Bookings and Tickets plugin <= 3.1.5 versions.

Vendor	Product	Affected	Fixed
EventPrime	EventPrime – Events Calendar, Bookings and Tickets	≤ 3.1.5	—