Input validation vulnerability in WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce 3.1.37.1

The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is vulnerable to a type of attack that allows attackers with certain privileges to inject code into pages on a site. This code will then be executed when a user visits the page. The vulnerability affects multi-site installations and installations where the ability to use HTML has been disabled. The versions of the plugin up to and including 3.1.37.1 are vulnerable.