CVE-2022-0709

CVE-2022-0709

The Booking Package WordPress plugin before 1.5.29 requires a token for exporting the ical representation of it’s booking calendar, but this token is returned in the json response to unauthenticated users performing a booking, leading to a sensitive data disclosure vulnerability.

Source: CVE-2022-0709

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다