Manipulating Hidden Fields in WpDevArt Booking Calendar
CVE-2023-24373
9.8CRITICAL
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 3 June 2024
What is CVE-2023-24373?
The vulnerability allows external users to manipulate hidden fields within the WpDevArt Booking Calendar and Appointment Booking System, which can result in unauthorized access or modification of data. This presents a significant risk for applications relying on the integrity of these hidden fields, potentially exposing sensitive information or leading to further exploits.
Affected Version(s)
Booking calendar, Appointment Booking System <= 3.2.3