Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in imithemes Eventer eventer allows Reflected XSS.This issue affects Eventer: from n/a through < 3.9.9.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:LImithemes Eventer
APPImithemes< 3.9.9
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
XSS
CWE
Related vulnerabilities
CVE-2025-39481CRITICAL9.3PL ✓ten sam produkt
Blind SQL Injection w pluginie WordPress Eventer (imithemes)
CVE-2025-0959HIGH8.8ten sam produkt
The Eventer - WordPress Event & Booking Manager Plugin plugin for WordPress is vulnerable to SQL Injection via...
CVE-2024-11135HIGH7.5ten sam produkt
The Eventer plugin for WordPress is vulnerable to SQL Injection via the 'event' parameter in the 'eventer_get_...
CVE-2025-39482MEDIUM4.3ten sam produkt
Missing Authorization vulnerability in imithemes Eventer eventer allows Exploiting Incorrectly Configured Acce...
CVE-2024-11134MEDIUM4.3ten sam produkt
The Eventer plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability chec...