Input validation vulnerability in EventPrime – Modern Events Calendar, Bookings and Tickets 3.0.5

The EventPrime plugin for WordPress is vulnerable to a security risk called Reflected Cross-Site Scripting. This is an issue in versions up to 3.0.5. It happens because the plugin does not properly check the inputs that come in, or protect against malicious scripts. If an attacker can trick a user into clicking on a link, they can inject dangerous scripts into the page, which could harm the user.