CVE-2020-35037

PoC —

CVSS 3.1

6.1 medium

EPSS

<1%p57

Published

Dec 1, 2021 (Dec 1, 2021)

Modified

Jun 17, 2026

Description

The Events Manager WordPress plugin before 5.9.8 does not sanitise and escape some search parameter before outputing them in pages, which could lead to Cross-Site Scripting issues

Vendors: pixelite
Products: events manager
Ecosystems: WordPress
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.