VDB
CVE-2024-7982
CVE-2024-7982
PUBLISHED
CVSS 8.5 HIGH
The Registrations for the Events Calendar WordPress plugin before 2.12.4 does not sanitise and escape some parameters when accepting event registrations, which could allow unauthenticated users to perform Cross-Site Scripting attacks.
EPSS 0.73% · 53.8th percentile
Risk Scores
CVSS 4.0
8.5
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS Score
0.73%
53.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| roundupwp | registrations_for_the_events_calendar | 0 |
| roundupwp | registrations_for_the_events_calendar | 0, 0 |
| Unknown | Registrations for the Events Calendar | 0, 0 |
Timeline
- Nov 8, 2024 Coalition ESS Score
- Nov 8, 2024 Coalition ESS Score
- Nov 8, 2024 CVE Published
- Nov 8, 2024 PoC Published
- Nov 8, 2024 CVE Updated
- Nov 9, 2024 EPSS Score
- Nov 28, 2024 EPSS Score
- Dec 18, 2024 EPSS Score
- Jan 24, 2025 EPSS Score
- Feb 12, 2025 EPSS Score
- Mar 3, 2025 EPSS Score
- Mar 21, 2025 EPSS Score