← Database

CVE-2022-0739

CRITICAL CVSS: 9.8 Published: 2022-03-21 Modified: 2026-06-17

Description

The BookingPress WordPress plugin before 1.0.11 fails to properly sanitize user supplied POST data before it is used in a dynamically constructed SQL query via the bookingpress_front_get_category_services AJAX action (available to unauthenticated users), leading to an unauthenticated SQL Injection

Affected Platforms

Reputeinfosystems Bookingpress

Weakness Type

CWE-89

References