CVE-2023-23991

🗓️ 23 May 2025 02:42:41Reported by redhat.comType

Booking Calendar plugin SQL injection results from improper neutralization of special elements.

Reporter	Title	Published	Views	Family All 10
CNNVD	WordPress Plugin WP Booking Calendar SQL注入漏洞	26 Mar 202400:00	–	cnnvd
CVE	CVE-2023-23991	26 Mar 202408:56	–	cve
Cvelist	CVE-2023-23991 WordPress Booking Calendar plugin <= 9.4.3 - SQL Injection	26 Mar 202408:56	–	cvelist
EUVD	EUVD-2023-28055	3 Oct 202520:07	–	euvd
NVD	CVE-2023-23991	26 Mar 202409:15	–	nvd
OSV	CLEANSTART-2026-HF07497 Security fixes for CVE-2023-23991, CVE-2025-15558, CVE-2025-47907, CVE-2025-61728, CVE-2025-61730, CVE-2025-66506, CVE-2025-66564, CVE-2026-1229, CVE-2026-22703, CVE-2026-22772, CVE-2026-23831, CVE-2026-23992, CVE-2026-24051, CVE-2026-24117, CVE-2026-24137, CVE-2026-24686, CVE-2026-25679, CVE-2026-26958, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-32952, CVE-2026-33186, CVE-2026-33810, CVE-2026-34986, CVE-2026-39883, ghsa-2x5j-vhc8-9cwm, ghsa-6m8w-jc87-6cr7, ghsa-fw7p-63qq-7hpr, ghsa-p436-gjf2-799p, ghsa-p77j-4mvh-x3m3, ghsa-pjcq-xvwq-hhpj, ghsa-vvgc-356p-c3xw applied in versions: 1.14.4-r1, 1.14.4-r2, 1.14.5-r3, 1.14.5-r4, 1.14.5-r5, 1.14.5-r6, 1.14.5-r7	18 May 202613:57	–	osv
Patchstack	WordPress Booking Calendar Plugin <= 9.4.3 is vulnerable to SQL Injection	20 Jan 202300:00	–	patchstack
Positive Technologies	PT-2024-12020	26 Mar 202400:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2023-23991: Improper Neutralization of Special Elements used in an SQL Command	26 Mar 202400:00	–	rapid7
Vulnrichment	CVE-2023-23991 WordPress Booking Calendar plugin <= 9.4.3 - SQL Injection	26 Mar 202408:56	–	vulnrichment