Advanced Booking Calendar (Unknown) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-04-11. Vendor: Unknown.

CVEs of Advanced Booking Calendar

• CVE-2022-1006 - CVSS 7.2 (high), 2022-04-11: The Advanced Booking Calendar WordPress plugin before 1.7.1 does not sanitise and escape the id parameter when editing Calendars, which could allow high…
• CVE-2022-1007 - CVSS 6.1 (medium), 2022-04-11: The Advanced Booking Calendar WordPress plugin before 1.7.1 does not sanitise and escape the room parameter before outputting it back in an admin page,…
• CVE-2022-0694 - CVSS 9.8 (critical), 2022-03-21: The Advanced Booking Calendar WordPress plugin before 1.7.0 does not validate and escape the calendar parameter before using it in a SQL statement via the…
• CVE-2021-24232 - CVSS 5.4 (medium), 2021-04-22: The Advanced Booking Calendar WordPress plugin before 1.6.8 does not sanitise the license error message when output in the settings page, leading to an…
• CVE-2021-24225 - CVSS 5.4 (medium), 2021-04-12: The Advanced Booking Calendar WordPress plugin before 1.6.7 did not sanitise the calId GET parameter in the "Seasons & Calendars" page before outputing it in…