CVE-2024-6711 — Event Tickets with Ticket Scanner < 2.3.8 - Admin+ Stored XSS
The Event Tickets with Ticket Scanner WordPress plugin before 2.3.8 does not sanitise and escape some parameters, which could allow users with a role as low as admin to perform …
Published: 2025-05-15 · CVSS: 3.5 · CVSS 3.1
The Event Tickets with Ticket Scanner WordPress plugin before 2.3.8 does not sanitise and escape some parameters, which could allow users with a role as low as admin to perform Cross-Site Scripting attacks
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7