Event Tickets with Ticket Scanner, CVE-2024-6711

CVE, Research URL: CVE-2024-6711
Home page URL: Security reports for Event Tickets with Ticket Scanner
Application: Event Tickets with Ticket Scanner
Published on: May 16, 2025
Research Description: The Event Tickets with Ticket Scanner WordPress plugin before 2.3.8 does not sanitise and escape some parameters, which could allow users with a role as low as admin to perform Cross-Site Scripting attacks
Affected versions: max 2.3.8.
Status: vulnerable