Wielebenwir Commonsbooking
3 CVEs affecting Wielebenwir Commonsbooking. Latest disclosed: 2024-06-21. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-0658 | Critical | 9.8 | 2022-03-14 | The CommonsBooking WordPress plugin before 2.6.8 does not sanitise and escape the location parameter of the calendar_data AJAX action (available to unauthentic… |
CVE-2024-4382 | Medium | 6.5 | 2024-06-21 | The CB (legacy) WordPress plugin through 0.9.4.18 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform… |
CVE-2024-4381 | Medium | 4.8 | 2024-06-21 | The CB (legacy) WordPress plugin through 0.9.4.18 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to pe… |