Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Mobileeventsmanager Clear all filters
TI-2022-01083 CVE-2022-1194 · GHSA-4p76-gp5v-jc39

Mobile Events Manager < 1.4.8 - Admin+ CSV Injection

Priority MEDIUM 41

The Mobile Events Manager WordPress plugin before 1.4.8 does not properly escape the Enquiry source field when exporting events, or the Paid for field when exporting transactions as CSV, leading to a CSV injection vulner…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01262 Published 2022-09-16 Fixed in 1.4.8 CWE-1236
TI-2021-07327 CVE-2021-25049 · GHSA-gj4f-w3w4-qfqj

Mobile Events Manager < 1.4.4 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Mobile Events Manager WordPress plugin before 1.4.4 does not sanitise and escape various of its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00654 Published 2022-01-24 Fixed in 1.4.4 CWE-79