Code injection

2018-06-1318:29:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.7%

JSON

An issue was discovered in the WpDevArt “Booking calendar, Appointment Booking System” plugin 2.2.2 for WordPress. Multiple parameters allow remote attackers to manipulate the values to change data such as prices.

CPENameOperatorVersion
booking_calendareq2.2.2

CPE	Name	Operator	Version
	booking_calendar	eq	2.2.2

References

gist.github.com/B0UG/68d3161af0c0ec85c615ca7452f9755e