My Tickets Project My Tickets vulnerabilities

2 vulnerabilities

Known vulnerabilities in My Tickets Project My Tickets, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2021-24796my_tickets_projectmy_tickets+2
EPSS score
1.19%
The My Tickets WordPress plugin before 1.8.31 does not properly sanitise and escape the Email field of booked tickets before outputting it in the Payment admin dashboard, which could allow unauthenticated users to perform Cross-Site Scripting attacks against admins8.8CVE-2022-47440joseph c dolsonmy tickets+2
EPSS score
0.28%
Cross-Site Request Forgery (CSRF) vulnerability in Joseph C Dolson My Tickets plugin <= 1.9.10 versions.