← CVE Intelligence

CVE-2022-3982

Booking Calendar < 3.2.2 - Unauthenticated Arbitrary File Upload PUBLISHED

Description (CNA)

The Booking calendar, Appointment Booking System WordPress plugin before 3.2.2 does not validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE

Affected (CNA)

Vendor / productVersions
Unknown / Booking calendar, Appointment Booking Systemaffected 0 before 3.2.2

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.