Security Advisory
CVE-2015-9460
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The booking-system plugin before 2.1 for WordPress has DOPBSPBackEndTranslation::display SQL injection via the language parameter.