The Avirato hotels online booking engine WordPress plugin through 5.0.5 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscriber to perform SQL Injection attacks.
References
Link | Resource |
---|---|
https://wpscan.com/vulnerability/03d061b4-1b71-44f5-b3dc-f82a5fcd92eb | Exploit |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: WPScan
Published: 2023-05-08T13:58:02.011Z
Updated: 2023-05-08T13:58:02.011Z
Reserved: 2023-02-09T19:39:56.486Z
Link: CVE-2023-0768
JSON object: View
NVD Information
Status : Modified
Published: 2023-05-08T14:15:12.067
Modified: 2023-11-07T04:01:25.840
Link: CVE-2023-0768
JSON object: View
Redhat Information
No data.
CWE
No CWE.