High · 7.1 CVE-2023-48326 EUVD-2023-52382GHSA-v9pc-864r-vp5h

WordPress Events Manager Plugin <= 6.4.5 is vulnerable to Cross Site Scripting (XSS)

Published Nov 30, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Pixelite Product: Events Manager

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pixelite Events Manager allows Reflected XSS.This issue affects Events Manager: from n/a through 6.4.5.

Affected products

Vendor	Product	Affected	Fixed
Pixelite	Events Manager	≤ 6.4.5	—

References

https://patchstack.com/database/vulnerability/events-manager/wordpress-events-manager-plugin-6-4-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry