The events-manager plugin through 5.9.5 for WordPress (aka Events Manager) is susceptible to Stored XSS due to improper encoding and insertion of data provided to the attribute map_style of shortcodes (locations_map and events_map) provided by the plugin.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2019-10-16T14:02:04
Updated: 2024-08-05T01:17:40.288Z
Reserved: 2019-09-19T00:00:00
Link: CVE-2019-16523
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2019-10-16T15:15:15.397
Modified: 2019-10-18T20:25:36.000
Link: CVE-2019-16523
Redhat
No data.