CVE-2020-35037

CVE-2020-35037: Events Manager < 5.9.8 - Cross-Site Scripting (XSS)

Vendor Unknown
Product Events Manager
Weakness CWE-79 · XSS
Published December 1, 2021
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Events Manager WordPress plugin before 5.9.8 does not sanitise and escape some search parameter before outputing them in pages, which could lead to Cross-Site Scripting issues

Key dates

02Disclosure timeline

December 1, 2021 CVE published
August 4, 2024 Record updated