The BookingPress WordPress plugin... CVE-2022-0739

7.5 AV AC AU C I A
发布: 2022-03-21
修订: 2024-11-21

The BookingPress WordPress plugin before 1.0.11 fails to properly sanitize user supplied POST data before it is used in a dynamically constructed SQL query via the bookingpress_front_get_category_services AJAX action (available to unauthenticated users), leading to an unauthenticated SQL Injection

0%
当前有1条漏洞利用/PoC
当前有1条受影响产品信息