CVE-2022-4036

概要

参考情報

• plugins.trac.wordpress.org/changeset · Patch
• wordfence.com/threat-intel/vulnerabilities/id/f62d28bd-fa33-4f0b-a116-5aacc05bfa3a
• wordfence.com/vulnerability-advisories-continued · Third Party Advisory

appointment hour booking のその他の脆弱性

• CVE-2022-4035中 6.1The Appointment Hour Booking plugin for WordPress is vulnerable to iFrame Injection via the ‘email’ or general field parameters in versions …
• CVE-2022-4034高 7.8The Appointment Hour Booking Plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.3.72. This makes it pos…
• CVE-2022-41692高 8.8Missing Authorization vulnerability in Appointment Hour Booking plugin <= 1.3.71 on WordPress.
• CVE-2022-1710中 4.8The Appointment Hour Booking WordPress plugin before 1.3.56 does not sanitise and escape a settings of its Calendar fields, which could allo…
• CVE-2021-24712中 5.4The Appointment Hour Booking WordPress plugin before 1.3.17 does not properly sanitize values used when creating new calendars.