WordPress WP Event Manager 3.1.44 Cross Site Scripting

=============================================================================================================================================| # Title     : WordPress WP Event Manager plugin 3.1.44 XSS Vulnerability                                                                  || # Author    : indoushka                                                                                                                   || # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 128.0.3 (64 bits)                                                            || # Vendor    : https://wordpress.org/plugins/wp-event-manager/                                                                             |=============================================================================================================================================poc :[+] Dorking İn Google Or Other Search Enggine.[+] Install the plugins - wp-event-manager and activate it.[+] Go to event manager —> Add New - Inside the “”Event Title” at the top, enter XSS payload “><img src=xonerror=alert(1)> and hit publish.[+] Check the newly made event’s URL /event/{id}/ , XSS will trigger.Greetings to :============================================================jericho * Larry W. Cashdollar * LiquidWorm * Hussin-X * D4NB4R * CraCkEr |==========================================================================