CPE
The Pixelite Events Manager plugin contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability, allowing Reflected XSS.