WordPress Plugin Vulnerabilities

Events Manager < 5.3.6.1 - Multiple Cross-Site Scripting (XSS)

Description

The Events Manager WordPress plugin was affected by a Multiple Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
events-manager
Fixed in 5.3.6.1

References

CVE
CVE-2013-7480

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Verified
No
WPVDB ID
0016d3a4-f851-428f-92c5-cc3678e27641

Timeline

Publicly Published
2013-02-27 (about 13 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2024-12-05
Title
Flixita < 1.0.83 - Reflected Cross-Site Scripting via id Parameter
Published
2025-04-24
Title
Custom Admin-Bar Favorites <= 0.1 - Reflected Cross-Site Scripting
Published
2023-02-20
Title
Video Background < 2.7.5 - Contributor+ Stored XSS via Shortcode
Published
2025-06-19
Title
ANON::form embedded secure form < 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2023-09-27
Title
Save as Image by Pdfcrowd < 2.16.1 - Admin+ Stored XSS