CVE-2022-41692

概要

参考情報

• patchstack.com/database/vulnerability/appointment-hour-booking/wordpress-appointment-hour-booking-plugin-1-3-71-missing-authorization-vulnerability · Third Party Advisory

appointment hour booking のその他の脆弱性

• CVE-2022-4036中 5.3The Appointment Hour Booking plugin for WordPress is vulnerable to CAPTCHA bypass in versions up to, and including, 1.3.72. This is due to t…
• CVE-2022-4035中 6.1The Appointment Hour Booking plugin for WordPress is vulnerable to iFrame Injection via the ‘email’ or general field parameters in versions …
• CVE-2022-4034高 7.8The Appointment Hour Booking Plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.3.72. This makes it pos…
• CVE-2022-1710中 4.8The Appointment Hour Booking WordPress plugin before 1.3.56 does not sanitise and escape a settings of its Calendar fields, which could allo…
• CVE-2021-24712中 5.4The Appointment Hour Booking WordPress plugin before 1.3.17 does not properly sanitize values used when creating new calendars.