WordPress Plugin Vulnerabilities

Events Manager 5.3.8 - Multiple Cross-Site Scripting (XSS)

Description

The Events Manager WordPress plugin was affected by a Multiple Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
events-manager
Fixed in 5.3.9

References

CVE
CVE-2013-7479

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Verified
No
WPVDB ID
eca29ca5-a6a7-4f9e-bc4f-ae7351957c7b

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2024-05-29
Title
PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) < 2.7.20 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Published
2024-10-09
Title
Restaurant Reservations Widget <= 1.0 - Reflected Cross-Site Scripting
Published
2023-05-16
Title
File Away <= 3.9.9.0.1 - Contributor+ Stored XSS via Shortcode
Published
2025-08-04
Title
WP Easy Contact < 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter
Published
2019-08-10
Title
PPOM for WooCommerce <= 18.3 - Authenticated Stored XSS