CVE-2018-0576: XSS
Cross-site scripting vulnerability in Events Manager plugin prior to version 5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-0576?
CVE-2018-0576 is a cross-site scripting vulnerability in the Events Manager plugin for WordPress prior to version 5.9.
How severe is CVE-2018-0576?
CVE-2018-0576 has a severity rating of 5.4, which is considered medium.
How does CVE-2018-0576 affect WordPress?
CVE-2018-0576 allows remote attackers to inject arbitrary web script or HTML into WordPress installations using the Events Manager plugin prior to version 5.9.
How can I fix CVE-2018-0576?
To fix CVE-2018-0576, you should update the Events Manager plugin to version 5.9 or later.
Where can I find more information about CVE-2018-0576?
You can find more information about CVE-2018-0576 on the JVN website (http://jvn.jp/en/jp/JVN85531148/index.html), the plugin's official page on WordPress.org (https://wordpress.org/plugins/events-manager/#developers), and WPScan's vulnerability database (https://wpvulndb.com/vulnerabilities/9609).