Path Traversal Vulnerability Affects Booking Ultra Pro

CVE-2024-38717

What is CVE-2024-38717?

A vulnerability exists in Booking Ultra Pro where improper limitation of a pathname allows attackers to exploit a path traversal flaw. This issue can lead to PHP Local File Inclusion, potentially enabling unauthorized access to sensitive files on the server. The vulnerability impacts versions from n/a to 1.1.13 of the Booking Ultra Pro plugin, making it critical for users to update to the latest release to mitigate risks associated with this flaw.

References