Lucene search
HistoryDec 12, 2022 - 6:15 p.m.
CVE-2022-3982
wordpress
plugin
arbitrary files
rce
security vulnerability
unauthenticated users
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.289 Low
EPSS
Percentile
96.9%
The Booking calendar, Appointment Booking System WordPress plugin before 3.2.2 does not validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE
Affected configurations
Node
wpdevartbooking_calendarRange<3.2.2wordpress
Related
cve
cve
CVE-2022-3982
2022-12-12 18:15:12
prion
prion
Default credentials
2022-12-12 18:15:00
nuclei
nuclei
WordPress Booking Calendar <3.2.2 - Arbitrary File Upload
2023-03-31 11:28:24
openvas
openvas
wpvulndb
wpvulndb
Booking Calendar < 3.2.2 - Unauthenticated Arbitrary File Upload
2022-11-21 00:00:00
cvelist
cvelist
wpexploit
wpexploit
Booking Calendar < 3.2.2 - Unauthenticated Arbitrary File Upload
2022-11-21 00:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.289 Low
EPSS
Percentile
96.9%
Related for NVD:CVE-2022-3982