9.6 Critical

CVE-2024-7982 The Registrations for the Events Calendar WordPress plugin before 2.12.4 does not sanitise and escape some parameters…

Description

The Registrations for the Events Calendar WordPress plugin before 2.12.4 does not sanitise and escape some parameters when accepting event registrations, which could allow unauthenticated users to perform Cross-Site Scripting attacks.

Affected products and versions

Product	Affected versions	Fixed in
Registrations for the Events Calendar 2.12	earliest → < 2.12.4	2.12.4
registrations_for_the_events_calendar 2.12	earliest → < 2.12.4	2.12.4

The 2 CVEs of Registrations for the Events Calendar →

CVE-2024-10703 The Registrations for the Events Calendar WordPress plugin before 2.13.4 does not sanitise and escape some of its… 6.1 Medium

Do you use Registrations for the Events Calendar?

Track this CVE Watch Registrations for the Events Calendar Check my SBOMs

www.cveye.io/en/cve/CVE-2024-7982

Timeline

Published November 8, 2024
Last modified November 8, 2024

References

wpscan.com wpscan.com

Track this CVE

CVE-2024-7982 The Registrations for the Events Calendar WordPress plugin before 2.12.4 does not sanitise and escape some parameters…

Description

Affected products and versions

Other CVEs of Registrations for the Events Calendar