CVE-2022-45822

Mô tả

Tham khảo

• patchstack.com/database/vulnerability/advanced-booking-calendar/wordpress-advanced-booking-calendar-plugin-1-7-1-unauth-sql-injection-sqli-vulnerability · Third Party Advisory

Lỗ hổng khác của advanced booking calendar

• CVE-2022-45824TRUNG BÌNH 6.5Cross-Site Request Forgery (CSRF) vulnerability in Advanced Booking Calendar plugin <= 1.7.1 on WordPress.
• CVE-2022-1007TRUNG BÌNH 6.1The Advanced Booking Calendar WordPress plugin before 1.7.1 does not sanitise and escape the room parameter before outputting it back in an …
• CVE-2022-1006CAO 7.2The Advanced Booking Calendar WordPress plugin before 1.7.1 does not sanitise and escape the id parameter when editing Calendars, which coul…
• CVE-2022-0694NGHIÊM TRỌNG 9.8The Advanced Booking Calendar WordPress plugin before 1.7.0 does not validate and escape the calendar parameter before using it in a SQL sta…
• CVE-2021-24232TRUNG BÌNH 5.4The Advanced Booking Calendar WordPress plugin before 1.6.8 does not sanitise the license error message when output in the settings page, le…