Skip to content
OpenAdvisories
High · 7.1 CVE-2023-47697 EUVD-2023-51795GHSA-w69h-jwj5-jm7c

WordPress WP Event Manager Plugin <= 3.1.39 is vulnerable to Cross Site Scripting (XSS)

Published Nov 13, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: WP Event Manager Product: WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce Category: Web / CMS

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP Event Manager WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin <= 3.1.39 versions.

Affected products

VendorProductAffectedFixed
WP Event Manager WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce ≤ 3.1.39 —

References