Events Manager – Calendar, Bookings, Tickets, and more!, CVE-2019-16523

CVE, Research URL: CVE-2019-16523
Home page URL: Security reports for Events Manager – Calendar, Bookings, Tickets, and more!
Application: Events Manager – Calendar, Bookings, Tickets, and more!
Published on: Oct 16, 2019
Research Description: The events-manager plugin through 5.9.5 for WordPress (aka Events Manager) is susceptible to Stored XSS due to improper encoding and insertion of data provided to the attribute map_style of shortcodes (locations_map and events_map) provided by the plugin.
Affected versions: Min -, max 5.9.6.
Status: vulnerable

Events Manager &#8211; Calendar, Bookings, Tickets, and more!, CVE-2019-16523