Skip to content
Sign in
8.8 High

CVE-2023-0220 The Pinpoint Booking System WordPress plugin before 2.9.9.2.9 does not validate and escape one of its shortcode…

Description

The Pinpoint Booking System WordPress plugin before 2.9.9.2.9 does not validate and escape one of its shortcode attributes before using it in a SQL statement, which could allow any authenticated users, such as subscriber to perform SQL Injection attacks.

Affected products and versions

Product Affected versions Fixed in
Pinpoint Booking System 2.9 earliest → < 2.9.9.2.9 2.9.9.2.9

Other CVEs of Pinpoint Booking System

The 3 CVEs of Pinpoint Booking System →
CVE-2026-15229 The Pinpoint Booking System WordPress plugin through 2.9.9.7.1 does not validate the booking price on the server… 5.3 Medium CVE-2024-3636 The Pinpoint Booking System WordPress plugin before 2.9.9.4.8 does not sanitise and escape some of its settings,… 5.4 Medium
Track this CVE