VYPR

Event Expresso Free

by WordPress

CVEs (1)

  • CVE-2017-1002026HigSep 14, 2017
    risk 0.57cvss 8.8epss 0.01

    Vulnerability in wordpress plugin Event Expresso Free v3.1.37.11.L, The function edit_event_category does not sanitize user-supplied input via the $id parameter before passing it into an SQL statement.