WordPress Online Booking and Scheduling Plugin – Bookly, CVE-2023-26526

CVE, Research URL: CVE-2023-26526
Home page URL: Security reports for WordPress Online Booking and Scheduling Plugin – Bookly
Application: WordPress Online Booking and Scheduling Plugin – Bookly
Published on: May 17, 2024
Research Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Nota-Info Bookly allows Path Traversal, Manipulating Web Input to File System Calls.This issue affects Bookly: from n/a through 21.7.1.
Affected versions: max 21.8.
Status: vulnerable