Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Wielebenwir Subscribe
Filtered by product Commonsbooking
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-0658 1 Wielebenwir 1 Commonsbooking 2022-03-21 7.5 HIGH 9.8 CRITICAL
The CommonsBooking WordPress plugin before 2.6.8 does not sanitise and escape the location parameter of the calendar_data AJAX action (available to unauthenticated users) before it is used in dynamically constructed SQL queries, leading to an unauthenticated SQL injection