the only wat that I could find to allow visitors to submit events was to pretty much give them administrative privileges in settings. Granted, this does not give you the option to “approve” them, but if you give form added events a different name (ie: new_events), then they are easy to find.
I am sure that there is a proper way, but I have not found it