CVE-2023-47525

概要

参考情報

• patchstack.com/database/vulnerability/event-monster/wordpress-event-monster-plugin-1-3-2-cross-site-scripting-xss-vulnerability · Third Party Advisory

event monster のその他の脆弱性

• CVE-2024-11396中 5.3The Event Monster – Event Management, Tickets Booking, Upcoming Event plugin for WordPress is vulnerable to Information Exposure in all vers…
• CVE-2024-5059高 7.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in A WP Life Event Management Tickets Booking.This issue affects Ev…
• CVE-2024-1895高 7.5The Event Monster – Event Management, Tickets Booking, Upcoming Event plugin for WordPress is vulnerable to PHP Object Injection in all vers…
• CVE-2022-3720高 7.2The Event Monster WordPress plugin before 1.2.0 does not validate and escape some parameters before using them in SQL statements, which coul…
• CVE-2022-3336中 4.3The Event Monster WordPress plugin before 1.2.0 does not have CSRF check when deleting visitors, which could allow attackers to make logged …