WordPress Online Booking and Scheduling Plugin – Bookly, CVE-2023-4691

CVE, Research URL: CVE-2023-4691
Home page URL: Security reports for WordPress Online Booking and Scheduling Plugin – Bookly
Application: WordPress Online Booking and Scheduling Plugin – Bookly
Published on: Oct 17, 2023
Research Description: The WordPress Online Booking and Scheduling Plugin WordPress plugin before 22.4 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin
Affected versions: max 22.4.
Status: vulnerable