CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Repute Infosystems BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin.This issue affects BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin: from n/a through 1.0.64.
Explanation of Vulnerability in Simple Terms
BookingPress versions up to 1.0.64 expose sensitive information that can be accessed over the network without authentication. An attacker can retrieve data by sending a direct request to the plugin. The exposure is limited to information disclosure with no ability to modify or disable the site. Update to a version newer than 1.0.64.
What an attacker can do
Read sensitive information from the plugin without logging in.
Potential impact on your site
Visitor or customer data may be exposed depending on what information the plugin stores.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
