Lucene search
WPScanCVELIST:CVE-2024-0856HistoryMar 20, 2024 - 5:00 a.m.
CVE-2024-0856 Booking Calendar < 1.3.83 - CSRF appointment scheduling
2024-03-2005:00:02
WPScan
www.cve.org
booking calendar
csrf
wordpress
plugin
vulnerability
version 1.3.83
The Appointment Booking Calendar WordPress plugin before 1.3.83 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks such as adding a booking to the calendar without paying.
CNA Affected
[
{
"vendor": "Unknown",
"product": "Appointment Booking Calendar",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "1.3.83"
}
],
"defaultStatus": "unaffected"
}
]Related
nvd
nvd
CVE-2024-0856
2024-03-20 05:15:45
wpvulndb
wpvulndb
Booking Calendar < 1.3.83 - CSRF appointment scheduling
2024-02-28 00:00:00
cve
cve
CVE-2024-0856
2024-03-20 05:15:45
wpexploit
wpexploit
Booking Calendar < 1.3.83 - CSRF appointment scheduling
2024-02-28 00:00:00