Vulnetix
Try Vulnetix Request Demo
CVE-2024-7982 PUBLISHED CVSS 9.600000381469727 CRITICAL

The Registrations for the Events Calendar WordPress plugin before 2.12.4 does not sanitise and escape some parameters when accepting event registrations, which could allow unauthenticated users to perform Cross-Site Scripting attacks.

EPSS 1.37% · 80.1th percentile

Risk Scores

CVSS v3.1
9.600000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
EPSS Score
1.37%
80.1th percentile

Affected Products

VendorProductVersions
roundupwpregistrations_for_the_events_calendar0
roundupwpregistrations_for_the_events_calendar0
UnknownRegistrations for the Events Calendar0

Timeline

References

Open in Interactive Console →