CVE-2024-35652

MEDIUM 6.1CVE-2024-35652 · Published 04/06/2024 · updated 17/06/2026

In short

CVE-2024-35652 is a MEDIUM (CVSS 6.1) vulnerability affecting event tickets with ticket scanner (vollstart).
Chance of exploitation in the next 30 days (EPSS): 0.29%, higher than 21.5% of all vulnerabilities.
Fix: update to 2.3.2 or later.

Package	Affected versions	Patched versions
event tickets with ticket scanner vollstart	`< 2.3.2`	`2.3.2`

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Saso Nikolov Event Tickets with Ticket Scanner allows Reflected XSS.This issue affects Event Tickets with Ticket Scanner: from n/a through 2.3.1.

References

patchstack.com/database/vulnerability/event-tickets-with-ticket-scanner/wordpress-event-tickets-with-ticket-scanner-plugin-2-3-1-reflected-cross-site-scripting-xss-vulnerability · Third Party Advisory

More vulnerabilities in event tickets with ticket scanner

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

event tickets with ticket scanner

vollstart

< 2.3.2

2.3.2

More vulnerabilities in event tickets with ticket scanner

See all →