CVE-2026-28162

Unauthenticated Cross Site Scripting (XSS) in Events Made Easy <= 3.2.5 versions.

Credits

sequence_X0 | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/events-made-easy/vulnerability/wordpress-events-made-easy-plugin-3-2-5-cross-site-scripting-xss-vulnerability?_s_id=cve