Input validation vulnerability in EventPrime – Events Calendar, Bookings and Tickets 4.0.4.7

The EventPrime plugin for WordPress, which helps with creating events, managing bookings, and selling tickets, has a security issue. This issue, known as Stored Cross-Site Scripting, affects all versions of the plugin up to 4.0.4.7. It happens because the plugin does not properly clean up user input and output. This allows attackers to add harmful code to pages that will run when someone views the booking history.