WordPress Plugin Vulnerabilities

Events Manager < 5.6 - Cross-Site Scripting (XSS) & Code Injection

Description

The Events Manager WordPress plugin was affected by a Cross-Site Scripting (XSS) & Code Injection security vulnerability.

Affects Plugins

Plugin icon
events-manager
Fixed in 5.6

References

CVE
CVE-2015-9297
CVE
CVE-2015-9298

Miscellaneous

Verified
No
WPVDB ID
dc0e020c-d412-4289-abad-e4d6210131b4

Timeline

Publicly Published
2015-08-10 (about 10 years ago)
Added
2019-08-25 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2017-10-23
Title
Contact Form for WordPress – Ultimate Form Builder Lite <= 1.3.6 - SQL Injection
Published
2018-11-15
Title
Slideshow Gallery <= 1.6.8 - XSS and SQLi
Published
2019-05-31
Title
Zoho SalesIQ <= 1.0.8 - XSS & CSRF
Published
2015-01-03
Title
SimpleFlickr 3.0.3 - CSRF & XSS
Published
2020-01-09
Title
CityBook < 2.3.4 - Multiple Vulnerabilities