Input validation vulnerability in EventPrime – Events Calendar, Bookings and Tickets 3.2.0

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress has a security vulnerability that could allow unauthenticated attackers to inject malicious content onto search pages. This vulnerability affects all versions of the plugin up to 3.2.0, and is caused by inadequate input sanitization and output escaping. If an attacker can get a user to perform an action such as clicking a link, they can use this vulnerability to inject malicious content onto the search page.