Reflected XSS Vulnerability in MDJM Event Management by MDJM
CVE-2025-22714

7.1HIGH

Key Information:

Vendor
WordPress
Status
Mdjm Event Management
Vendor
CVE Published:
24 January 2025

Summary

The MDJM Event Management product is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability. This flaw allows an attacker to inject malicious scripts into web pages viewed by users. When exploited, this vulnerability could enable unauthorized actions, session hijacking, or the exposure of sensitive user data. It affects versions from n/a to 1.7.5.5, emphasizing the importance of immediate remediation measures to protect web applications and users.

Affected Version(s)

MDJM Event Management <= 1.7.5.5

References

https://patchstack.com/database/wordpress/plugin/mobile-d...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

0xd4rk5id3 (Patchstack Alliance)
.