The EventPrime plugin for WordPress is not secure in versions prior to 2.8.6. This means that malicious attackers could inject web scripts into pages that would be executed if they can trick a user into performing certain actions, such as clicking on a link. These attacks are possible because the input and output are not properly sanitized and escaped.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
