Lucene search
PRIOn knowledge basePRION:CVE-2021-24555HistoryAug 23, 2021 - 12:15 p.m.
Sql injection
2021-08-2312:15:00
PRIOn knowledge base
www.prio-n.com
1
The daac_delete_booking_callback function, hooked to the daac_delete_booking AJAX action, takes the id POST parameter which is passed into the SQL statement without proper sanitisation, validation or escaping, leading to a SQL Injection issue. Furthermore, the ajax action is lacking any CSRF and capability check, making it available to any authenticated user.
| CPE | Name | Operator | Version |
|---|---|---|---|
| diary-availability-calendar | le | 1.0.3 |
Related
cve
cve
CVE-2021-24555
2021-08-23 12:15:09
cvelist
cvelist
patchstack
patchstack
nvd
nvd
CVE-2021-24555
2021-08-23 12:15:09
wpvulndb
wpvulndb
wpexploit
wpexploit