CVE-2022-1474
11.07.2022, 13:15
The WP Event Manager WordPress plugin before 3.1.28 does not sanitise and escape its search before outputting it back in an attribute on the event dashboard, leading to a Reflected Cross-Site Scripting
| Vendor | Product | Version |
|---|---|---|
| wp-eventmanager | wp_event_manager | 𝑥 < 3.1.28 |
𝑥
= Vulnerable software versions