agentprime: events-managerEvery new CVE for events-manager.https://agentprime.io/CVE-2026-93662: Events Manager 7.4.1 - 7.4.4 - Subscriber+ Unpublished Event and Location Disclosure via 'owner' Parameterhttps://agentprime.io/advisories/CVE-2026-93662/https://agentprime.io/advisories/CVE-2026-93662/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 06:00:20 GMTCVECVE-2026-93661: Events Manager < 7.4.5 - Contributor+ Arbitrary Ticket Overwrite via IDORhttps://agentprime.io/advisories/CVE-2026-93661/https://agentprime.io/advisories/CVE-2026-93661/CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 06:00:20 GMTCVECVE-2026-18366: Events Manager < 7.4.1 - Unauthenticated Privilege Escalation to Administratorhttps://agentprime.io/advisories/CVE-2026-18366/https://agentprime.io/advisories/CVE-2026-18366/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 06:00:17 GMTCVEcriticalCVE-2026-18057: Events Manager < 7.4.1 - Subscriber+ Booking Consent Record Tampering via SQL Injectionhttps://agentprime.io/advisories/CVE-2026-18057/https://agentprime.io/advisories/CVE-2026-18057/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 06:00:16 GMTCVECVE-2026-18050: Events Manager < 7.4 - Unauthenticated Pending Upload Disclosure via events-manager/v1/uploadshttps://agentprime.io/advisories/CVE-2026-18050/https://agentprime.io/advisories/CVE-2026-18050/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 06:00:10 GMTCVECVE-2026-12987: Events Manager < 7.3.7 - Unauthenticated SQL Injection via PHP Object Injection in Booking Registrationhttps://agentprime.io/advisories/CVE-2026-12987/https://agentprime.io/advisories/CVE-2026-12987/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 06:00:02 GMTCVECVE-2020-35037: Events Manager < 5.9.8 - Cross-Site Scripting (XSS)https://agentprime.io/advisories/CVE-2020-35037/https://agentprime.io/advisories/CVE-2020-35037/Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Dec 2021 22:50:11 GMTCVECVE-2020-35012: Events Manager < 5.9.8 - Admin+ SQL Injectionhttps://agentprime.io/advisories/CVE-2020-35012/https://agentprime.io/advisories/CVE-2020-35012/Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Dec 2021 22:50:10 GMTCVE