Vulnerabilities > Reputeinfosystems > Bookingpress > Critical

DATE CVE VULNERABILITY TITLE RISK
2022-03-21 CVE-2022-0739 Unspecified vulnerability in Reputeinfosystems Bookingpress
The BookingPress WordPress plugin before 1.0.11 fails to properly sanitize user supplied POST data before it is used in a dynamically constructed SQL query via the bookingpress_front_get_category_services AJAX action (available to unauthenticated users), leading to an unauthenticated SQL Injection
network
low complexity
reputeinfosystems
critical
9.8