CVE-2026-84848 Unauthenticated Cross Site Scripting (XSS) in Quick Event Manager <= 9.17 versions

Description

Unauthenticated Cross Site Scripting (XSS) in Quick Event Manager <= 9.17 versions.

Affected products and versions

Product	Affected versions	Fixed in
Quick Event Manager 9.17	earliest → 9.17	No fix stated

Other CVEs of Quick Event Manager

The 3 CVEs of Quick Event Manager →

CVE-2026-84847 Unauthenticated Broken Access Control in Quick Event Manager <= 9.17 versions 7.5 High CVE-2022-4974 The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… 6.3 Medium