CVE-2015-9460

Pinpoint Booking System – #1 WordPress Booking Plugin < 2.1 - Authenticated SQL Injection

highImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

8.8

CVSS Score

8.8

CVSS Score

high

Severity

2.1

Patched in

3122d

Time to patch

The booking-system plugin before 2.1 for WordPress has DOPBSPBackEndTranslation::display SQL injection via the language parameter.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

High

Confidentiality

High

Integrity

High

Availability

Affected versions<2.1

PublishedJuly 7, 2015

Last updatedJanuary 22, 2024

Affected pluginbooking-system

References

Check if your site is affected.

Run a free security audit to detect vulnerable plugins, outdated versions, and misconfigurations.