← Database

CVE-2024-7982

CRITICAL CVSS: 9.6 Published: 2024-11-08 Modified: 2026-06-17

Description

The Registrations for the Events Calendar WordPress plugin before 2.12.4 does not sanitise and escape some parameters when accepting event registrations, which could allow unauthenticated users to perform Cross-Site Scripting attacks.

Affected Platforms

Roundupwp Registrations For The Events Calendar

Weakness Type

CWE-79

References