← Back

Mobile Events Manager

mobile_events_manager

Vendor: Mobileeventsmanager • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-1194
1Mobileeventsmanager
1Mobile Events Manager
Jun 17, 2026
Sep 16, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
The Mobile Events Manager WordPress plugin before 1.4.8 does not properly escape the Enquiry source field when exporting events, or the Paid for field when exporting transactions as CSV, leading to a CSV injection vulner...Show more
The Mobile Events Manager WordPress plugin before 1.4.8 does not properly escape the Enquiry source field when exporting events, or the Paid for field when exporting transactions as CSV, leading to a CSV injection vulnerability.Show less
CVE-2021-25049
1Mobileeventsmanager
1Mobile Events Manager
Jun 17, 2026
Jan 24, 2022
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
The Mobile Events Manager WordPress plugin before 1.4.4 does not sanitise and escape various of its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability...Show more
The Mobile Events Manager WordPress plugin before 1.4.4 does not sanitise and escape various of its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowedShow less