Really Simple Security logo

Log out
Get PRO

Latest

Output validation vulnerability in Appointment Hour Booking – WordPress Booking Plugin 1.3.72

  • Severity: medium-risk
  • Status: Fixed
  • Publication: November 29, 2022

The Appointment Hour Booking Plugin for WordPress is not secure in versions up to 1.3.72. This means that attackers who are not authorized to get into the system can add malicious content to bookings that can be exported as a CSV file. These files can contain code that can be executed on a local system that is not properly configured

Detected in:

Appointment Hour Booking – Booking Calendar fixed vulnerable versions:
Appointment Hour Booking – WordPress Booking Plugin fixed vulnerable versions: >= * <= 1.3.72

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.