CVE-2022-33177

Mô tả

Tham khảo

• patchstack.com/database/vulnerability/booking/wordpress-booking-calendar-plugin-9-2-1-cross-site-request-forgery-csrf-leading-to-translations-update/_s_id=cve · Third Party Advisory
• wordpress.org/plugins/booking · Product

Lỗ hổng khác của booking calendar

• CVE-2024-13821TRUNG BÌNH 5.3The WP Booking Calendar plugin for WordPress is vulnerable to Unauthenticated Post-Confirmation Booking Manipulation in all versions up to, …
• CVE-2024-6930TRUNG BÌNH 5.4The WP Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' attribute within the plugin's booki…
• CVE-2024-1207NGHIÊM TRỌNG 9.8The WP Booking Calendar plugin for WordPress is vulnerable to SQL Injection via the 'calendar_request_params[dates_ddmmyy_csv]' parameter in…
• CVE-2023-51520TRUNG BÌNH 5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPdevelop / Oplugins WP Booking Calend…
• CVE-2023-4620TRUNG BÌNH 6.1The Booking Calendar WordPress plugin before 9.7.3.1 does not sanitize and escape some of its booking from data, allowing unauthenticated us…