Unknown Event Manager And Tickets Selling Plugin For Woocommerce vulnerabilities

2 vulnerabilities

Known vulnerabilities in Unknown Event Manager And Tickets Selling Plugin For Woocommerce, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2022-0478mage-peopleevent_manager_and_tickets_selling_for_woocommerce+2
EPSS score
1.54%
The Event Manager and Tickets Selling for WooCommerce WordPress plugin before 3.5.8 does not validate and escape the post_author_gutenberg parameter before using it in a SQL statement when creating/editing events, which could allow users with a role as low as contributor to perform SQL Injection attacks6.4CVE-2023-0144mage-peopleevent_manager_and_tickets_selling_for_woocommerce+2
EPSS score
0.48%
The Event Manager and Tickets Selling Plugin for WooCommerce WordPress plugin before 3.8.0 does not validate and escape some of its post meta before outputting them back in a page/post, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.