Advisories · Technology
liedekef Events Made Easy.
Every CVE that names liedekef Events Made Easy among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
Events Made Easy <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width' Shortcode Attribute
- liedekef Events Made Easy
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Events Made Easy <= 3.2.22 - Unauthenticated Stored Cross-Site Scripting via 'event[location_name]' Parameter
- liedekef Events Made Easy
- Cross-site scripting (XSS)
- CVSS 7.5 High
Events Made Easy <= 3.2.5 - Authenticated (Contributor+) Local File Inclusion via 'wp_page_template' Event Property
- liedekef Events Made Easy
- File inclusion
- CVSS 5.4 Medium
Events Made Easy <= 2.3.16 - Missing Authorization
- liedekef Events Made Easy
- Broken access control