Lucene search
D4wnerPATCHSTACK:E2437C805AE1669353A39B34468166AEHistoryJan 22, 2018 - 12:00 a.m.
WordPress Booking calendar plugin <=2.1.7 - Cross-Site Request Forgery (CSRF) vulnerability
2018-01-2200:00:00
d4wner
patchstack.com
5
0.002 Low
EPSS
Percentile
53.3%
Cross-Site Request Forgery (CSRF) vulnerability found by d4wner in WordPress Booking calendar plugin (versions <=2.1.7).
Solution
Update the WordPress Booking calendar plugin to the latest available version (at least 2.1.8).
| CPE | Name | Operator | Version |
|---|---|---|---|
| booking calendar, appointment booking system | le | 2.1.7 |
Related
nvd
nvd
CVE-2018-5673
2018-01-13 00:29:01
cve
cve
CVE-2018-5673
2018-01-13 00:29:01
prion
prion
Cross site request forgery (csrf)
2018-01-13 00:29:00
cvelist
cvelist
CVE-2018-5673
2018-01-13 00:00:00
wpvulndb
wpvulndb
Booking Calendar <= 2.1.7 - Authenticated Stored XSS & CSRF
2018-01-12 00:00:00
