The events-manager plugin up to and including 5.9.5 for WordPress (aka Events Manager) is susceptible to Stored XSS due to improper encoding and insertion of data provided to the attribute map_style of shortcodes (locations_map and events_map) provided by the plugin.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
wp-events-plugin events manager |