7.5
Élevée
CVE-2024-12274 The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.1.23 export settings…
Description
The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.1.23 export settings functionality exports data to a public folder, with an easily guessable file name, allowing unauthenticated attackers to access the exported files (if they exist).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Appointment Booking Calendar Plugin and Scheduling Plugin 1.1 | premières → < 1.1.23 | 1.1.23 |