CVE-2023-47697
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP Event Manager WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin <= 3.1.39 versions.
- Score
- CVSS 3.1 7.1 High
- Status
- Modified - audit@patchstack.com
- Published
- 2023-11-13
- Last modified
- 2026-04-28
- Weaknesses
- CWE-79
Affected products
- Wp Event Manager (Wp-eventmanager)
- Registrations (Wp Event Manager)
- Sell Tickets With Woocommerce (Wp Event Manager)
- Wp Event Manager Events Calendar (Wp Event Manager)
References
- https://patchstack.com/database/vulnerability/wp-event-manager/wordpress-wp-event-manager-plugin-3-1-39-cross-site-scri…
