Lucene search
PRIOn knowledge basePRION:CVE-2022-1952HistoryJul 11, 2022 - 1:15 p.m.
Input validation
2022-07-1113:15:00
PRIOn knowledge base
www.prio-n.com
10
The Free Booking Plugin for Hotels, Restaurant and Car Rental WordPress plugin before 1.1.16 suffers from insufficient input validation which leads to arbitrary file upload and subsequently to remote code execution. An AJAX action accessible to unauthenticated users is affected by this issue. An allowlist of valid file extensions is defined but is not used during the validation steps.
| CPE | Name | Operator | Version |
|---|---|---|---|
| free_booking_plugin_for_hotels\\,_restaurant_and_car_rental | lt | 1.1.16 |
Related
wpvulndb
wpvulndb
eaSYNC < 1.1.16 - Unauthenticated Arbitrary File Upload
2022-06-15 00:00:00
cvelist
cvelist
CVE-2022-1952 eaSYNC < 1.1.16 - Unauthenticated Arbitrary File Upload
2022-07-11 12:56:52
cnvd
cnvd
cve
cve
CVE-2022-1952
2022-07-11 13:15:09
nvd
nvd
CVE-2022-1952
2022-07-11 13:15:09
nuclei
nuclei
WordPress eaSYNC Booking <1.1.16 - Arbitrary File Upload
2022-10-29 11:20:01
wpexploit
wpexploit
eaSYNC < 1.1.16 - Unauthenticated Arbitrary File Upload
2022-06-15 00:00:00
patchstack
patchstack