Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xv7j-wg82-2r7g

Опубликовано: 26 июн. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

The Bookster WordPress plugin through 1.1.0 allows adding sensitive parameters when validating appointments allowing attackers to manipulate the data sent when booking an appointment (the request body) to change its status from pending to approved.

The Bookster WordPress plugin through 1.1.0 allows adding sensitive parameters when validating appointments allowing attackers to manipulate the data sent when booking an appointment (the request body) to change its status from pending to approved.

EPSS

Процентиль: 37%
0.00159
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 6.5
nvd
больше 1 года назад

The Bookster WordPress plugin through 1.1.0 allows adding sensitive parameters when validating appointments allowing attackers to manipulate the data sent when booking an appointment (the request body) to change its status from pending to approved.

EPSS

Процентиль: 37%
0.00159
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-863