Booking calendar, Appointment Booking System, cb943861-0f21-41d7-9ed3-a9260157e25e
- CVE, Research URL
- Application
- Published on
- -
- Research Description
- Booking calendar, Appointment Booking System [booking-calendar] < 3.2.12 Booking Calendar WpDevArt < 3.2.12 - Admin+ SQLi The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin
- Affected versions
-
max 3.2.12.
- Status
-
vulnerable