Events Manager – Calendar, Bookings, Tickets, and more!, CVE-2018-9020

CVE, Research URL: CVE-2018-9020
Home page URL: Security reports for Events Manager – Calendar, Bookings, Tickets, and more!
Application: Events Manager – Calendar, Bookings, Tickets, and more!
Published on: Mar 26, 2018
Research Description: The Events Manager plugin before 5.8.1.2 for WordPress allows XSS via the events-manager.js mapTitle parameter in the Google Maps miniature.
Affected versions: Min -, max 5.8.1.2.
Status: vulnerable

Events Manager &#8211; Calendar, Bookings, Tickets, and more!, CVE-2018-9020