CVE Daily

CVE-2022-3982

The Booking calendar, Appointment Booking System WordPress plugin before 3.2.2 d...

Critical CVSS 9.8

Overview

The Booking calendar, Appointment Booking System WordPress plugin before 3.2.2 does not validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE

CWE: N/A Published: 2022-12-12T18:15:12.487
Risk analysis

This vulnerability is rated 🔴 CRITICAL.

  • CVSS: 9.8 (CRITICAL)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags