Pinpoint Booking System Security Vulnerabilities and Issues — Pinpoint Booking System CVE List

Lucene search

PinpointPinpoint Booking System

3 matches found

CVE•added 2023/02/13 3:15 p.m.•49 views

CVE-2023-0220

The Pinpoint Booking System WordPress plugin before 2.9.9.2.9 does not validate and escape one of its shortcode attributes before using it in a SQL statement, which could allow any authenticated users, such as subscriber to perform SQL Injection attacks.

8.8CVSS9AI score0.00335EPSS

CVE•added 2023/10/13 4:15 p.m.•32 views

CVE-2023-45270

Cross-Site Request Forgery (CSRF) vulnerability in PINPOINT.WORLD Pinpoint Booking System plugin

8.8CVSS6.5AI score0.0007EPSS

CVE•added 2023/04/06 2:15 p.m.•29 views

CVE-2023-25062

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PINPOINT.WORLD Pinpoint Booking System plugin

5.9CVSS5.1AI score0.0029EPSS