My Tickets Project vulnerabilities

2 vulnerabilities

Known vulnerabilities in My Tickets Project products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

Products

1
6.1CVE-2021-24796my_tickets_projectmy_tickets+2
EPSS score
1.19%
The My Tickets WordPress plugin before 1.8.31 does not properly sanitise and escape the Email field of booked tickets before outputting it in the Payment admin dashboard, which could allow unauthenticated users to perform Cross-Site Scripting attacks against admins8.8CVE-2022-47440joseph c dolsonmy tickets+2
EPSS score
0.28%
Cross-Site Request Forgery (CSRF) vulnerability in Joseph C Dolson My Tickets plugin <= 1.9.10 versions.