CVE-2013-7480: XSS
First published: Thu Aug 22 2019(Updated: )
The events-manager plugin before 5.3.6.1 for WordPress has XSS via the booking form and admin areas.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Pixelite Events Manager | <5.3.6.1 | |
| WP Event Manager | <5.3.6.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2013-7480.
What is the title of the vulnerability?
The title of the vulnerability is 'The events-manager plugin before 5.3.6.1 for WordPress has XSS via the booking form and admin areas.'
How does this vulnerability affect WordPress?
This vulnerability affects WordPress through the events-manager plugin version 5.3.6.1 and earlier.
What is the severity of CVE-2013-7480?
CVE-2013-7480 is classified as having a medium severity with a CVSS score of 6.1.
How can I fix this vulnerability?
To fix this vulnerability, update the events-manager plugin to version 5.3.6.1 or later.
- agent/type
- agent/first-publish-date
- agent/references
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/description
- agent/event
- agent/source
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/author
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- vendor/pixelite
- canonical/pixelite events manager
- vendor/wp-events-plugin
- canonical/wp event manager