Input validation vulnerability in EventPrime – Events Calendar, Bookings and Tickets 3.3.9

The EventPrime plugin for WordPress has a security issue that allows attackers to inject harmful code into pages. This can happen when an administrator changes the plugin’s settings. This vulnerability affects all versions up to 3.3.9 and can only be exploited by authenticated attackers with high-level permissions. It only affects websites with multiple installations or those that have disabled certain security measures.