Vulnerability — CVE-2023-4691

CVE-2023-4691

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2023-4691
Description:: The WordPress Online Booking and Scheduling Plugin WordPress plugin before 22.4 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin
Last updated date:: 10/20/2023

Type:: exploit
Confidence:: HIGH
Date of publishing:: 10/20/2023
Reference url to background: https://wpscan.com/vulnerability/5085ec75-0795-4004-955d-e71b3d2c26c6