Skip to content
Sign in
3.5 Low

CVE-2024-6711 The Event Tickets with Ticket Scanner WordPress plugin before 2.3.8 does not sanitise and escape some parameters,…

Description

The Event Tickets with Ticket Scanner WordPress plugin before 2.3.8 does not sanitise and escape some parameters, which could allow users with a role as low as admin to perform Cross-Site Scripting attacks

Affected products and versions

Product Affected versions Fixed in
Event Tickets with Ticket Scanner 2.3 earliest → < 2.3.8 2.3.8

Other CVEs of Event Tickets with Ticket Scanner

The 2 CVEs of Event Tickets with Ticket Scanner →
CVE-2025-1762 The Event Tickets with Ticket Scanner WordPress plugin before 2.5.4 does not have CSRF check in place when updating… 4.3 Medium
Track this CVE