Event Tickets
Nexcess
Developer
5.29.5
Latest version
90,000
Installations
No date
Last updated
Vulnerability history
0 present
22 patched
6 Mitigation rules
- Missing Authorization to Unauthenticated Stripe Credentials Update vulnerability<= 5.27.408/09/2026
- Cross Site Scripting (XSS) vulnerability<= 5.29.2.124/08/2026
- Contributor+ Seating Layout and Ticket Inventory Modification vulnerability< 5.29.0.101/08/2026
- Unauthenticated PayPal Order Status Manipulation vulnerability< 5.29.0.101/08/2026
- Editor+ Stored XSS vulnerability< 5.28.428/07/2026
- Broken Access Control vulnerability<= 5.29.0.124/07/2026
- Broken Access Control vulnerability<= 5.28.508/07/2026
- Bypass Vulnerability vulnerability<= 5.27.502/05/2026
- Unauthenticated Ticket Payment Bypass vulnerability<= 5.26.518/10/2025
- Broken Access Control vulnerability<= 5.26.316/10/2025
- Reflected Cross Site Scripting (XSS) vulnerability<= 5.20.027/03/2025
- Missing Authorization to Ticket Deletion vulnerability<= 5.19.1.120/02/2025
- Insecure Direct Object Reference to Sensitive Information Exposure vulnerability<= 5.18.130/01/2025
- Cross Site Request Forgery (CSRF) vulnerability<= 5.11.0.412/07/2024
- Improper Authorization to Information Disclosure<= 5.8.226/03/2024
- Contributor+ Arbitrary Events Access vulnerability< 5.8.105/03/2024
- Missing Authorization vulnerability<= 5.8.122/02/2024
- Reflected Cross Site Scripting (XSS) vulnerability<= 5.5.11.119/07/2023
- Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability< 5.3.0.128/02/2022
- Sensitive Information Disclosure vulnerability< 5.3.0.128/02/2022
- Open Redirect vulnerability<= 5.2.122/12/2021
- CSV Injection vulnerability<= 4.10.7.103/09/2019