Booking calendar, Appointment Booking System, CVE-2018-10363

CVE, Research URL: CVE-2018-10363
Home page URL: Security reports for Booking calendar, Appointment Booking System
Application: Booking calendar, Appointment Booking System
Published on: Jun 13, 2018
Research Description: An issue was discovered in the WpDevArt "Booking calendar, Appointment Booking System" plugin 2.2.2 for WordPress. Multiple parameters allow remote attackers to manipulate the values to change data such as prices.
Affected versions: max 2.2.3.
Status: vulnerable