Description
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. CSRF exists via wp-admin/admin.php.
Remediation
References
https://github.com/d4wner/Vulnerabilities-Report/blob/master/booking-calendar.md
https://wpvulndb.com/vulnerabilities/9012
Related Vulnerabilities
CVE-2021-43090 Vulnerability in maven package com.predic8:soa-model-core
CVE-2021-29505 Vulnerability in maven package com.thoughtworks.xstream:xstream
CVE-2023-29202 Vulnerability in maven package org.xwiki.platform:xwiki-platform-rendering-macro-rss
CVE-2021-23372 Vulnerability in npm package mongo-express
CVE-2020-8141 Vulnerability in maven package org.webjars.npm:dot