cbcvebase.

Event Espresso Event Expresso Free vulnerabilities

1 known vulnerability affecting event_espresso/event_expresso_free.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2017-1002026P3HIGHCVSS 8.8≥ unspecified, < 3.1.37.11.L2017-09-14
CVE-2017-1002026 [HIGH] CWE-89 CVE-2017-1002026: Vulnerability in wordpress plugin Event Expresso Free v3.1.37.11.L, The function edit_event_category Vulnerability in wordpress plugin Event Expresso Free v3.1.37.11.L, The function edit_event_category does not sanitize user-supplied input via the $id parameter before passing it into an SQL statement.
nvd
Event Espresso Event Expresso Free vulnerabilities | cvebase