Logged In: NO

The bug is in:

$compositeContent = unserialize($event['varContent1']);
$markup = $compositeContent[0];
$description = stripslashes($compositeContent[1]);

which should be - because we serialize it addslashed:

$compositeContent =
unserialize(stripslashes($event['varContent1']));
$markup = $compositeContent[0];
$description = $compositeContent[1];

files affected are:
NewsManager/core.php
NewsManager/panel.php
the same bug is in
EventManager/core.php
EventManager/panel.php