CVE-2021-24225

概要

参考情報

• plugins.trac.wordpress.org/changeset/2503971 · Patch
• wpscan.com/vulnerability/25ca8af5-ab48-4e6d-b2ef-fc291742f1d5 · Exploit

advanced booking calendar のその他の脆弱性

• CVE-2022-45824中 6.5Cross-Site Request Forgery (CSRF) vulnerability in Advanced Booking Calendar plugin <= 1.7.1 on WordPress.
• CVE-2022-45822緊急 9.8Unauth. SQL Injection (SQLi) vulnerability in Advanced Booking Calendar plugin <= 1.7.1 on WordPress.
• CVE-2022-1007中 6.1The Advanced Booking Calendar WordPress plugin before 1.7.1 does not sanitise and escape the room parameter before outputting it back in an …
• CVE-2022-1006高 7.2The Advanced Booking Calendar WordPress plugin before 1.7.1 does not sanitise and escape the id parameter when editing Calendars, which coul…
• CVE-2022-0694緊急 9.8The Advanced Booking Calendar WordPress plugin before 1.7.0 does not validate and escape the calendar parameter before using it in a SQL sta…