Security Advisory

CVE-2023-5652

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-11-20 18:55:06

Last updated 2024-08-02 08:07:32

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The WP Hotel Booking WordPress plugin before 2.0.8 does not have authorisation and CSRF checks, as well as does not escape user input before using it in a SQL statement of a function hooked to admin_init, allowing unauthenticated users to perform SQL injections

← Browse all CVEs View on cve.org ↗