CVE-2025-31397

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in smartcms Bus Ticket Booking with Seat Reservation for WooCommerce scw-bus-seat-reservation allows SQL Injection.This issue affects Bus Ticket Booking with Seat Reservation for WooCommerce: from n/a through <= 1.7.

Score

CVSS 3.1 9.3 Critical

Status

Deferred - audit@patchstack.com

Published

2025-05-23

Last modified

2026-04-28

Weaknesses

CWE-89

Affected products

• Bus Ticket Booking With Seat Reservation For Woocommerce (Smartcms)

References

• https://patchstack.com/database/Wordpress/Plugin/scw-bus-seat-reservation/vulnerability/wordpress-bus-ticket-booking-wi…