Lucene search
HistoryJun 26, 2024 - 6:15 a.m.
CVE-2024-5071
bookster
wordpress plugin
appointment validation
status manipulation
data manipulation
security vulnerability
cve-2024-5071
0.0004 Low
EPSS
Percentile
9.1%
The Bookster WordPress plugin through 1.1.0 allows adding sensitive parameters when validating appointments allowing attackers to manipulate the data sent when booking an appointment (the request body) to change its status from pending to approved.
Related
vulnrichment
vulnrichment
CVE-2024-5071 Bookster <= 1.1.0 - Unauthenticated Appointment Status Update
2024-06-26 06:00:04
cve
cve
CVE-2024-5071
2024-06-26 06:15:16
wpvulndb
wpvulndb
Bookster <= 1.1.0 - Unauthenticated Appointment Status Update
2024-06-05 00:00:00
cvelist
cvelist
CVE-2024-5071 Bookster <= 1.1.0 - Unauthenticated Appointment Status Update
2024-06-26 06:00:04
wpexploit
wpexploit
Bookster <= 1.1.0 - Unauthenticated Appointment Status Update
2024-06-05 00:00:00