WpDevArt Booking Calendar Vulnerable to Missing Authorization

CVE-2023-24407

5MEDIUM

Key Information

Vendor: WPdevart
Status: Booking Calendar, Appointment Booking System
Vendor: CVE Published:; 9 December 2024

Summary

Missing Authorization vulnerability in WpDevArt Booking calendar, Appointment Booking System allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking calendar, Appointment Booking System: from n/a through 3.2.3.

Affected Version(s)

Booking calendar, Appointment Booking System <= 3.2.3

CVSS V3.1

Score:

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

High

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Dec 9, 2024
Vulnerability Reserved.
Jan 23, 2023

Collectors

NVD DatabaseMitre Database

Credit

yuyudhn (Patchstack Alliance)