Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-12274

BookingPress < 1.1.23 - Unauthenticated Export File Download

Description

The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.1.23 export settings functionality exports data to a public folder, with an easily guessable file name, allowing unauthenticated attackers to access the exported files (if they exist).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Appointment Booking Calendar Plugin and Scheduling Plugin

Default version status: unaffected

  • 0 to < 1.1.23affected

References