CriticalCVSS 9.8
EPSS 2.7%
SQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug parameter.
Vendor
1 published CVE affecting ezcode, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first
SQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug parameter.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.