Product

Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress (<= 5.7.2)

1 brief RSS

SQL Injection in LatePoint Appointment Booking Plugin for WordPress

An unauthenticated SQL injection vulnerability in the LatePoint Appointment Booking Plugin allows remote attackers to extract sensitive database information via the booking[service_id] parameter.

Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress web-application sql-injection wordpress cve

1r 1t 1c 7m ago