Medium severity6.1NVD Advisory· Published Dec 27, 2021· Updated Jun 17, 2026
CVE-2021-24797
CVE-2021-24797
Description
The Tickera WordPress plugin before 3.4.8.3 does not properly sanitise and escape the Name fields of booked Events before outputting them in the Orders admin dashboard, which could allow unauthenticated users to perform Cross-Site Scripting attacks against admins.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/0eb07cc8-8a19-4e01-ab90-844495413453nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.