CVE-2020-35037 | BDVDB-2026-165016 Detail

Events Manager

Description#

The Events Manager WordPress plugin before 5.9.8 does not sanitise and escape some search parameter before outputing them in pages, which could lead to Cross-Site Scripting issues

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

https://plugins.trac.wordpress.org/changeset/2336019/events-manager
https://wpscan.com/vulnerability/937b9bdb-7e8e-4ea8-82ec-aa5f6bd70619

Exploit#

No public exploit known

History#

Version 12021-12-01Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.