Vulnerabilities > Elbtide > Critical
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2022-12-05 | CVE-2022-45822 | Unspecified vulnerability in Elbtide Advanced Booking Calendar Unauth. | 9.8 |
2022-03-21 | CVE-2022-0694 | Unspecified vulnerability in Elbtide Advanced Booking Calendar The Advanced Booking Calendar WordPress plugin before 1.7.0 does not validate and escape the calendar parameter before using it in a SQL statement via the abc_booking_getSingleCalendar AJAX action (available to both unauthenticated and authenticated users), leading to an unauthenticated SQL injection | 9.8 |