Skip to content
OpenAdvisories
Medium · 5.9 CVE-2023-49181 EUVD-2023-53186GHSA-xxx9-8q88-3qrf

WordPress WP Event Manager Plugin <= 3.1.40 is vulnerable to Cross Site Scripting (XSS)

Published Dec 15, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Event Manager WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce allows Stored XSS.This issue affects WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce: from n/a through 3.1.40.

Affected products

VendorProductAffectedFixed
WP Event Manager WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce ≤ 3.1.40 —

References