Divebook Project Divebook
3 CVEs affecting Divebook Project Divebook. Latest disclosed: 2020-12-08. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-14206 | Medium | 6.1 | 2020-12-08 | The DiveBook plugin 1.1.4 for WordPress is prone to unauthenticated XSS within the filter function (via an arbitrary parameter). |
CVE-2020-14207 | Medium | 5.3 | 2020-12-08 | The DiveBook plugin 1.1.4 for WordPress was prone to a SQL injection within divelog.php, allowing unauthenticated users to retrieve data from the database via… |
CVE-2020-14205 | Medium | 5.3 | 2020-12-08 | The DiveBook plugin 1.1.4 for WordPress is prone to improper access control in the Log Dive form because it fails to perform authorization checks. An attacker… |