Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-4252

EventPrime <= 3.2.9 - Booking Pricing Bypass

Description

The EventPrime WordPress plugin through 3.2.9 specifies the price of a booking in the client request, allowing an attacker to purchase bookings without payment.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown EventPrime

Default version status: affected

  • 0 to ≤ 3.2.9affected

References