Read the docs

Mobileeventsmanager

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Mobileeventsmanager records in CISA KEV

No Mobileeventsmanager vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mobile Events Manager 2 records MEDIUM

Records

2 records

TI-2022-01083 CVE-2022-1194 · GHSA-4p76-gp5v-jc39

Mobile Events Manager < 1.4.8 - Admin+ CSV Injection

Priority MEDIUM 41

The Mobile Events Manager WordPress plugin before 1.4.8 does not properly escape the Enquiry source field when exporting events, or the Paid for field when exporting transactions as CSV, leading to a CSV injection vulner…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01262 Published 2022-09-16 Fixed in 1.4.8 CWE-1236
TI-2021-07327 CVE-2021-25049 · GHSA-gj4f-w3w4-qfqj

Mobile Events Manager < 1.4.4 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Mobile Events Manager WordPress plugin before 1.4.4 does not sanitise and escape various of its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00654 Published 2022-01-24 Fixed in 1.4.4 CWE-79
Open these records in search →