cleantalk
Vulnerabilities and Security Researches

Booking calendar, Appointment Booking System, cb943861-0f21-41d7-9ed3-a9260157e25e

Published on
-
Research Description
Booking calendar, Appointment Booking System [booking-calendar] < 3.2.12 Booking Calendar WpDevArt &lt; 3.2.12 - Admin+ SQLi The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin
Affected versions
max 3.2.12.
Status
vulnerable