Pixelite: >> Events Manager >> 5.9.6 Security Vulnerabilities
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pixelite Events Manager allows Reflected XSS.This issue affects Events Manager: from n/a through 6.4.5.
CVSS Score
7.1
EPSS Score
0.002
Published
2023-11-30
The Events Manager WordPress plugin before 5.9.8 does not sanitise and escape a parameter before using it in a SQL statement, leading to an SQL Injection
CVSS Score
7.2
EPSS Score
0.008
Published
2021-12-01
The Events Manager WordPress plugin before 5.9.8 does not sanitise and escape some search parameter before outputing them in pages, which could lead to Cross-Site Scripting issues
CVSS Score
6.1
EPSS Score
0.002
Published
2021-12-01
Page 2