← CVE Intelligence

CVE-2023-0768

Avirato hotels online booking engine <= 5.0.5 - Subscriber+ SQLi PUBLISHED

Description (CNA)

The Avirato hotels online booking engine WordPress plugin through 5.0.5 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscriber to perform SQL Injection attacks.

Affected (CNA)

Vendor / productVersions
Unknown / Avirato hotels online booking engineaffected 0 through 5.0.5

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.