WP Event Aggregator: Import Eventbrite events, Meetup events, social events and any iCal Events into WordPress, CVE-2024-38703

CVE, Research URL: CVE-2024-38703
Home page URL: Security reports for WP Event Aggregator: Import Eventbrite events, Meetup events, social events and any iCal Events into WordPress
Application: WP Event Aggregator: Import Eventbrite events, Meetup events, social events and any iCal Events into WordPress
Published on: Jul 20, 2024
Research Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Xylus Themes WP Event Aggregator allows Stored XSS.This issue affects WP Event Aggregator: from n/a through 1.7.9.
Affected versions: max 1.8.0.
Status: vulnerable