CVE-2023-49181

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2023-49181

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-49181.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2023-49181

Published

2023-12-15T15:15:09Z

Modified

2025-01-08T09:45:08.883907Z

Severity

5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Event Manager WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce allows Stored XSS.This issue affects WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce: from n/a through 3.1.40.

References

https://patchstack.com/database/vulnerability/wp-event-manager/wordpress-wp-event-manager-plugin-3-1-39-cross-site-scripting-xss-vulnerability-2?_s_id=cve

Affected packages

Git / github.com/wpeventmanager/wp-event-manager

Affected ranges

Type: GIT
Repo: https://github.com/wpeventmanager/wp-event-manager
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

9866e70d6950c31a73404ad6c319135da916ae10

Affected versions

3.*

3.1.14

3.1.15

3.1.16

3.1.17

3.1.18

3.1.19

3.1.20

3.1.21

3.1.23

3.1.24

3.1.25

3.1.26

3.1.27

3.1.28

3.1.29

3.1.30

3.1.31

3.1.32

3.1.33

3.1.34

3.1.35

3.1.37

3.1.37.1

3.1.38

3.1.39

3.1.40