CVE-2023-0144 (published 2023-02-06T19:59:26.720Z)
The Event Manager and Tickets Selling Plugin for WooCommerce WordPress plugin before 3.8.0 does not validate and escape some of its post meta before outputting them back in a page/post, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Affected products: Vendor: Unknown
Product: Event Manager and Tickets Selling Plugin for WooCommerce
Versions: 0