CVE-2025-9875 | Event Tickets, RSVPs, Calendar Plugin up to 1.0.1 on WordPress Shortcode ticket_spot cross site scripting

October 3, 2025 Yanac

A vulnerability categorized as problematic has been discovered in Event Tickets, RSVPs, Calendar Plugin up to 1.0.1 on WordPress. Affected by this issue is the function ticket_spot of the component Shortcode Handler. Executing manipulation can lead to cross site scripting.

This vulnerability is handled as CVE-2025-9875. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More