Lucene search

K
cvelistWPScanCVELIST:CVE-2022-0739
HistoryMar 21, 2022 - 6:56 p.m.

CVE-2022-0739 BookingPress < 1.0.11 - Unauthenticated SQL Injection

2022-03-2118:56:00
CWE-89
WPScan
raw.githubusercontent.com
3

9.8 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.0%

The BookingPress WordPress plugin before 1.0.11 fails to properly sanitize user supplied POST data before it is used in a dynamically constructed SQL query via the bookingpress_front_get_category_services AJAX action (available to unauthenticated users), leading to an unauthenticated SQL Injection

9.8 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.0%