CVE-2021-25049

MEDIO 4.8CVE-2021-25049 · Published 24/01/2022 · updated 17/06/2026

In breve

CVE-2021-25049 è una vulnerabilità MEDIO (CVSS 4.8) che riguarda mobile events manager (mobileeventsmanager).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.65%, superiore al 51.5% delle vulnerabilità.
Correzione: aggiornare a 1.4.4 o successiva.

Package	Affected versions	Patched versions
mobile events manager mobileeventsmanager	`< 1.4.4`	`1.4.4`

Description

The Mobile Events Manager WordPress plugin before 1.4.4 does not sanitise and escape various of its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed

References

plugins.trac.wordpress.org/changeset/2647987 · Patch
wpscan.com/vulnerability/227cbf50-59da-4f4c-85da-1959a108ae7e · Exploit

Altre vulnerabilità di mobile events manager

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free