| Package | Affected versions | Patched versions |
|---|---|---|
| events manager | ≤ 5.9.5 |
The events-manager plugin through 5.9.5 for WordPress (aka Events Manager) is susceptible to Stored XSS due to improper encoding and insertion of data provided to the attribute map_style of shortcodes (locations_map and events_map) provided by the plugin.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free