CVE-2018-13137

Description

References

• ansawaf.blogspot.com/2019/04/cve-2018-13137-xss-in-events-manager.html · Exploit
• gist.github.com/ansarisec/12737c207c0851d52865ed60c08891b7 · Exploit
• wordpress.org/plugins/events-manager · Product
• wpvulndb.com/vulnerabilities/9612

Altre vulnerabilità di events manager

• CVE-2025-6976MEDIO 5.4The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin…
• CVE-2025-6975MEDIO 6.1The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘ca…
• CVE-2025-6970ALTO 7.5The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’…
• CVE-2024-11260ALTO 7.5The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the active_st…
• CVE-2024-5889MEDIO 6.1The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘co…