Critical severity9.6NVD Advisory· Published Nov 8, 2024· Updated Jun 17, 2026

CVE-2024-7982

Description

The Registrations for the Events Calendar WordPress plugin before 2.12.4 does not sanitise and escape some parameters when accepting event registrations, which could allow unauthenticated users to perform Cross-Site Scripting attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Registrations For The Events Calendarcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <2.12.4
Package: https://wordpress.org/plugins/registrations-for-the-events-calendar

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/d79e1e9c-980d-4974-bfbd-d87d6e28d9a6/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.624
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000