CVE-2022-47428

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WpDevArt Booking calendar, Appointment Booking System allows SQL Injection.This issue affects Booking calendar, Appointment Booking System: from n/a through 3.2.7.

Reserved 2022-12-15 | Published 2023-11-06 | Updated 2024-09-05 | Assigner Patchstack

Problem types

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Product status

Default status
unaffected

Any version
affected

Credits

thiennv (Patchstack Alliance) finder

References

patchstack.com/...ystem-plugin-3-2-6-sql-injection?_s_id=cve vdb-entry

cve.org (CVE-2022-47428)

nvd.nist.gov (CVE-2022-47428)

Download JSON