CVE-2024-7982: Registrations for The Events Calendar < 2.12.4 - Unauthenticated Stored XSS
The Registrations for the Events Calendar WordPress plugin before 2.12.4 does not sanitise and escape some parameters when accepting event registrations, which could allow unauthenticated users to perform Cross-Site Scripting attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7982?
CVE-2024-7982 is classified as a medium severity vulnerability due to its potential for exploitation through Cross-Site Scripting attacks.
How do I fix CVE-2024-7982?
To fix CVE-2024-7982, update the Registrations for Events Calendar plugin to version 2.12.4 or later, where the vulnerability is patched.
What types of attacks does CVE-2024-7982 allow?
CVE-2024-7982 allows unauthenticated users to perform Cross-Site Scripting (XSS) attacks.
Who is affected by CVE-2024-7982?
Users of the Registrations for Events Calendar WordPress plugin version prior to 2.12.4 are affected by CVE-2024-7982.
What components are involved in CVE-2024-7982?
CVE-2024-7982 involves the event registration parameters of the Registrations for Events Calendar plugin that fail to sanitize and escape inputs.