CVE-2022-4036

Mô tả

Tham khảo

• plugins.trac.wordpress.org/changeset · Patch
• wordfence.com/threat-intel/vulnerabilities/id/f62d28bd-fa33-4f0b-a116-5aacc05bfa3a
• wordfence.com/vulnerability-advisories-continued · Third Party Advisory

Lỗ hổng khác của appointment hour booking

• CVE-2022-4035TRUNG BÌNH 6.1The Appointment Hour Booking plugin for WordPress is vulnerable to iFrame Injection via the ‘email’ or general field parameters in versions …
• CVE-2022-4034CAO 7.8The Appointment Hour Booking Plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.3.72. This makes it pos…
• CVE-2022-41692CAO 8.8Missing Authorization vulnerability in Appointment Hour Booking plugin <= 1.3.71 on WordPress.
• CVE-2022-1710TRUNG BÌNH 4.8The Appointment Hour Booking WordPress plugin before 1.3.56 does not sanitise and escape a settings of its Calendar fields, which could allo…
• CVE-2021-24712TRUNG BÌNH 5.4The Appointment Hour Booking WordPress plugin before 1.3.17 does not properly sanitize values used when creating new calendars.