Security Advisory

CVE-2022-0739

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-03-21 18:56:00

Last updated 2024-08-02 23:40:03

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The BookingPress WordPress plugin before 1.0.11 fails to properly sanitize user supplied POST data before it is used in a dynamically constructed SQL query via the bookingpress_front_get_category_services AJAX action (available to unauthenticated users), leading to an unauthenticated SQL Injection

← Browse all CVEs View on cve.org ↗