cleantalk
Vulnerabilities and Security Researches

WP Booking Calendar, CVE-2023-23991

CVE, Research URL

CVE-2023-23991

Application

WP Booking Calendar

Published on
Mar 26, 2024
Research Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPdevelop / Oplugins Booking Calendar allows SQL Injection.This issue affects Booking Calendar: from n/a through 9.4.3.
Affected versions
max 6.2.1.
Status
vulnerable