CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
External Control of Assumed-Immutable Web Parameter vulnerability in WpDevArt Booking calendar, Appointment Booking System allows Manipulating Hidden Fields.This issue affects Booking calendar, Appointment Booking System: from n/a through 3.2.3.
Explanation of Vulnerability in Simple Terms
The Booking Calendar plugin for WordPress contains a flaw that allows attackers to modify data through the network without authentication. The vulnerability requires specific conditions to exploit and has limited impact on data integrity. Site administrators should update to a patched version when available.
What an attacker can do
Modify plugin data or settings over the network without logging in.
Potential impact on your site
Booking calendar data or plugin configuration could be altered by an unauthenticated attacker.
Conditions required to exploit
Network access; specific conditions must be met to trigger the vulnerability.
Key dates
External resources
Related vulnerabilities
