CVE-2018-9020

The Events Manager plugin before 5.8.1.2 for WordPress allows XSS via the events-manager.js mapTitle parameter in the Google Maps miniature.

Score

CVSS 3.0 5.4 Medium

Status

Modified - cve@mitre.org

Published

2018-03-26

Last modified

2024-09-16

Weaknesses

CWE-79

Affected products

• Events Manager (Pixelite)

References

• http://wp-events-plugin.com/blog/2018/01/15/events-manager-5-8-1-2-security-release/
• https://wordpress.org/plugins/events-manager/#developers
• https://www.gubello.me/blog/events-manager-authenticated-stored-xss/
• https://www.youtube.com/watch?v=40d7uXl36O4