CVE-2022-1409

creationtimestamp| type| source ---|---|--- 2022-05-16 18:26:28+00:00| seen| https://t.me/cibsecurity/42736...

CVE-2022-1409

CVE-2022-1409 affects the WordPress VikBooking Hotel Booking Engine & PMS plugin prior to 1.5.8. The vulnerability arises from improper image validation in uploads, allowing high-privilege users (e.g., administrators) to upload PHP files disguised as images containing executable PHP code. This ca...