Security Advisory

CVE-2022-0709

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-04-04 15:35:47

Last updated 2024-08-02 23:40:03

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The Booking Package WordPress plugin before 1.5.29 requires a token for exporting the ical representation of it's booking calendar, but this token is returned in the json response to unauthenticated users performing a booking, leading to a sensitive data disclosure vulnerability.

← Browse all CVEs View on cve.org ↗