CVE-2024-6711 — Event Tickets with Ticket Scanner < 2.3.8 - Admin+ Stored XSS

CVE-2024-6711

Event Tickets with Ticket Scanner < 2.3.8 - Admin+ Stored XSS PUBLISHED

Description (CNA)

The Event Tickets with Ticket Scanner WordPress plugin before 2.3.8 does not sanitise and escape some parameters, which could allow users with a role as low as admin to perform Cross-Site Scripting attacks

Affected (CNA)

Vendor / product	Versions
Unknown / Event Tickets with Ticket Scanner	affected 0 before 2.3.8

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/bf431b81-2db9-4fcb-841c-9b51d1870bf8/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.