WordPress Plugin Vulnerabilities

Event Management Tickets Booking By Event Monster <= 1.0.5 - Stored XSS

Description

The Event Management Tickets Booking By Event Monster WordPress plugin was affected by a Stored XSS security vulnerability.

Affects Plugins

Plugin icon
event-monster
Fixed in 1.0.6

References

URL
https://docs.google.com/document/d/1rlijr98h9jReuY85eX00JgvNQHKRhzl4I5bRypMA490/edit?usp=sharing
URL
https://plugins.trac.wordpress.org/changeset/2095474/event-monster

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Original Researcher
Admavidhya N
Submitter
Admavidhya N
Verified
No
WPVDB ID
87f2244e-5403-449f-863e-d9d68a8faa95

Timeline

Publicly Published
2019-05-27 (about 6 years ago)
Added
2019-05-27 (about 6 years ago)
Last Updated
2019-11-06 (about 6 years ago)

Other

Published
Title
Published
2026-04-09
Title
User Registration < 5.1.6 - Reflected Cross-Site Scripting
Published
2026-02-05
Title
immonex Kickstart < 1.13.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-11-27
Title
Hostel < 1.1.6 - Reflected Cross-Site Scripting
Published
2017-01-15
Title
Stop User Enumeration 1.3.5-1.3.7 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Published
2024-05-01
Title
WP Recipe Maker < 9.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via wprm-recipe-roundup-item Shortcode