These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
The Events Manager plugin for WordPress has a Stored Cross-Site Scripting vulnerability via event attribute values in versions up to 7.3.3. This vulnerability allows authenticated attackers with Author-level access or unauthenticated attackers when anonymous submissions are enabled to inject web scripts that execute when users view affected event pages. The vulnerability is due to insufficient input sanit [truncated]
The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'header_format' parameter in all versions up to, and including, 7.4.0.1 due to insufficient input sanitization and output escaping. This vulnerability allows unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a [truncated]
The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.3.7.4 via the em_options_save function. Authenticated attackers with administrator-level access can include and execute arbitrary .php files, allowing code execution. The stored traversal key is executed via an include_once() call on every admin_ini [truncated]
The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.4.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to view the titles, dates, descriptions, and location details of events and locations that adm [truncated]
The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to generic SQL Injection via Stored 'meta_key' due to insufficient escaping on user-supplied parameters and lack of sufficient preparation on existing SQL queries. Authenticated attackers with contributor-level access and above can append additional SQL queries to extract sensitive information from the database.
