CVE-2025-24624: WordPress HT Event – WordPress Event Manager Plugin for Elementor Plugin <= 1.4.6 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevItems HT Event ht-event allows Reflected XSS.This issue affects HT Event: from n/a through <= 1.4.6.
Other sources
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasTech HT Event allows Reflected XSS. This issue affects HT Event: from n/a through 1.4.6.
— NVD
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-24624?
CVE-2025-24624 is classified as a moderate severity vulnerability due to the potential for reflected cross-site scripting attacks.
How do I fix CVE-2025-24624?
To fix CVE-2025-24624, update HasTech HT Event to version 1.4.7 or later.
What type of vulnerability is CVE-2025-24624?
CVE-2025-24624 is a reflected cross-site scripting (XSS) vulnerability.
What versions are affected by CVE-2025-24624?
CVE-2025-24624 affects HasTech HT Event versions up to and including 1.4.6.
What are the potential impacts of CVE-2025-24624?
The potential impacts of CVE-2025-24624 include unauthorized access to user sessions and delivery of malicious content to users.