CVE-2020-9371

概要

参考情報

• packetstormsecurity.com/files/156694/WordPress-Appointment-Booking-Calendar-1.3.34-CSV-Injection.html · Exploit
• drive.google.com/open · Exploit
• wordpress.org/plugins/appointment-booking-calendar · Release Notes
• wpvulndb.com/vulnerabilities/10110 · Third Party Advisory
• hotdreamweaver.com/support/view.php · Permissions Required

appointment booking calendar のその他の脆弱性

• CVE-2025-46247緊急 9.8Missing Authorization vulnerability in codepeople Appointment Booking Calendar appointment-booking-calendar allows Accessing Functionality N…
• CVE-2025-46241高 8.8Cross-Site Request Forgery (CSRF) vulnerability in codepeople Appointment Booking Calendar appointment-booking-calendar allows SQL Injection…
• CVE-2024-12274高 7.5The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.1.23 export settings functionality exports data to …
• CVE-2024-0856高 8.8The Appointment Booking Calendar WordPress plugin before 1.3.83 does not have CSRF checks in some places, which could allow attackers to mak…
• CVE-2022-43482高 8.8Missing Authorization vulnerability in Appointment Booking Calendar plugin <= 1.3.69 on WordPress.