CVE-2021-24726

The CVE relates to the WordPress plugin WP Simple Booking Calendar (versions before 2.0.6). Affected component: the Search Calendars action; root cause is failure to escape/validate/sanitize the orderby parameter, which is used in a SQL statement. This results in an authenticated SQL injection vu...