CVE-2017-1002026

State: Published
Severity: Not scored
Published: Sep 14, 2017
Updated: Sep 16, 2024
Reserved: Sep 14, 2017

Description

Vulnerability in wordpress plugin Event Expresso Free v3.1.37.11.L, The function edit_event_category does not sanitize user-supplied input via the $id parameter before passing it into an SQL statement.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Event Expresso FreeEvent Espresso	before 3.1.37.11.LAffected

References

https://wordpress.org/plugins/event-espresso-free/
http://www.vapidlabs.com/advisory.php?v=197

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.