CVE-2026-78263

Unauthenticated Cross Site Scripting (XSS) in Event Tickets <= 5.29.2.1 versions.

Credits

Udin Chan | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/event-tickets/vulnerability/wordpress-event-tickets-plugin-5-29-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve