CVE-2023-6219

creationtimestamp| type| source ---|---|--- 2023-12-17 07:41:45+00:00| seen| https://t.me/ctinow/155519...

CVE-2023-6219

The BookingPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation on the 'bookingpressprocessupload' function in versions up to, and including, 1.0.76. This makes it possible for authenticated attackers with administrator-level capabilities or above...

CVE-2023-6219

CVE-2023-6219 affects the BookingPress – Appointment Booking Calendar Plugin for WordPress. It allows authenticated administrators (or higher) to upload arbitrary files via the bookingpress_process_upload function due to insufficient input validation, up to and including version 1.0.76, with pote...

WordPress BookingPress Plugin <= 1.0.76 is vulnerable to Arbitrary File Upload

Software BookingPress Type Plugin Vulnerable versions = 1.0.76 Fixed in 1.0.77 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2023-6219 Patch priority Low CVSS severity Low 6.6 Developer Claim ownership PSID d9226b37951c Credits István Márton Required privilege...