Events Manager < 5.9.8 - Cross-Site Scripting (XSS)
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.9%
exploitation probability
0.9%top 44% of all CVEs
observed exploitation
nono source reports it
The Events Manager WordPress plugin before 5.9.8 does not sanitise and escape some search parameter before outputing them in pages, which could lead to Cross-Site Scripting issues
Affected products
Unknown · Events Manager