Booking Algorithms BA Book Everything SQL Injection Vulnerability

CVE-2024-32125

Summary

A SQL Injection vulnerability exists in the BA Book Everything plugin developed by Booking Algorithms, affecting versions up to 1.6.4. This vulnerability arises from improper neutralization of special elements within SQL commands, allowing an attacker to execute arbitrary SQL queries. Successful exploitation could lead to unauthorized access to sensitive data in the underlying database, posing significant security risks. Users are advised to update their installations to mitigate potential threats.

References