CVE-2018-20556

SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the booking_id…

published March 18, 2019

CVSS

—

EPSS

19%

Percentile

97.3

In the wild

Unconfirmed

What it is

SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the booking_id parameter.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.18906 · 97.3th percentile
Published: 2019-03-18T15:43Z

EPSS history

Timeline

18 MAR 15:43Z
SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the booking_id…
cvelistv5