Vulnerability — CVE-2024-6924

CVE-2024-6924

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2024-6924
Description:: The TrueBooker WordPress plugin before 1.0.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.
Last updated date:: 09/11/2024

Type:: exploit
Confidence:: HIGH
Date of publishing:: 09/11/2024
Reference url to background: https://wpscan.com/vulnerability/39e79801-6ec7-4579-bc6b-fd7e899733a8/