CVE-2023-47697 — WordPress WP Event Manager Plugin <= 3.1.39 is vulnerable to Cross Site Scripting (XSS)

CVE-2023-47697

WordPress WP Event Manager Plugin <= 3.1.39 is vulnerable to Cross Site Scripting (XSS) PUBLISHED

Description (CNA)

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP Event Manager WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin <= 3.1.39 versions.

Affected (CNA)

Vendor / product	Versions
WP Event Manager / WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce	affected n/a through 3.1.39

CWE

CWE-79

References

https://patchstack.com/database/vulnerability/wp-event-manager/wordpress-wp-event-manager-plugin-3-1-39-cross-site-scripting-xss-vulnerability?_s_id=cve

ADP enrichment

CVE

No English description supplied.

https://patchstack.com/database/vulnerability/wp-event-manager/wordpress-wp-event-manager-plugin-3-1-39-cross-site-scripting-xss-vulnerability?_s_id=cve

CISA-ADP

No English description supplied.

No references supplied.