CVE-2022-45822

Description

References

• patchstack.com/database/vulnerability/advanced-booking-calendar/wordpress-advanced-booking-calendar-plugin-1-7-1-unauth-sql-injection-sqli-vulnerability · Third Party Advisory

Altre vulnerabilità di advanced booking calendar

• CVE-2022-45824MEDIO 6.5Cross-Site Request Forgery (CSRF) vulnerability in Advanced Booking Calendar plugin <= 1.7.1 on WordPress.
• CVE-2022-1007MEDIO 6.1The Advanced Booking Calendar WordPress plugin before 1.7.1 does not sanitise and escape the room parameter before outputting it back in an …
• CVE-2022-1006ALTO 7.2The Advanced Booking Calendar WordPress plugin before 1.7.1 does not sanitise and escape the id parameter when editing Calendars, which coul…
• CVE-2022-0694CRITICO 9.8The Advanced Booking Calendar WordPress plugin before 1.7.0 does not validate and escape the calendar parameter before using it in a SQL sta…
• CVE-2021-24232MEDIO 5.4The Advanced Booking Calendar WordPress plugin before 1.6.8 does not sanitise the license error message when output in the settings page, le…