CVE-2023-4691 Bookly < 22.4 - Admin+ SQLi

2023-10-1619:39:05

WPScan

raw.githubusercontent.com

cve-2023-4691

bookly

admin+

sql injection

wordpress_plugin

sql_statement

high_privilege_users

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

18.2%

JSON

The WordPress Online Booking and Scheduling Plugin WordPress plugin before 22.4 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin