Filtered by vendor Community Events Project
Subscribe
Filtered by product Community Events
Subscribe
Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2021-24496 | 1 Community Events Project | 1 Community Events | 2021-08-10 | 4.3 MEDIUM | 6.1 MEDIUM |
The Community Events WordPress plugin before 1.4.8 does not sanitise, validate or escape its importrowscount and successimportcount GET parameters before outputting them back in an admin page, leading to a reflected Cross-Site Scripting issue which will be executed in the context of a logged in administrator | |||||
CVE-2015-3313 | 1 Community Events Project | 1 Community Events | 2017-09-11 | 7.5 HIGH | 9.8 CRITICAL |
SQL injection vulnerability in WordPress Community Events plugin before 1.4. |