Pixelite Vulnerabilities and Affected Products
Vulnerabilities associated with events_manager.
Products
Clear product- Events Manager3 vulnerabilities
- events_manager1 vulnerability
- Login With Ajax1 vulnerability
- meta_tag_manager1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-5889MEDIUM | Events Manager <= 6.4.8 - Reflected Cross-Site ScriptingThe Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘country’ parameter in all versions up to, and including, 6.4.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. CWE-79Jun 29, 2024 | CVSS6.1v3.1 | EPSS0.31% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |