What is CVE-2018-10363?

CVE-2018-10363 is a high-severity vulnerability in Wpdevart Booking Calendar, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2018-06-13.

How severe is CVE-2018-10363?

High severity. CVSS v3 base score is 7.5 out of 10.

Is CVE-2018-10363 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Improper input validation in Wpdevart Booking Calendar

CVE-2018-10363

An issue was discovered in the WpDevArt "Booking calendar, Appointment Booking System" plugin 2.2.2 for WordPress. Multiple parameters allow remote attackers to manipulate the values to change data such as prices.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.014 (69.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

Wpdevart Booking_calendar — versions 2.2.2
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

Public proof-of-concept exploits

20142995/nuclei-templates

References

cve@mitre.org (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2018-10363?: CVE-2018-10363 is a high-severity vulnerability in Wpdevart Booking Calendar, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2018-06-13.
How severe is CVE-2018-10363?: High severity. CVSS v3 base score is 7.5 out of 10.
Is CVE-2018-10363 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.