CVE-2023-4252 — EventPrime <= 3.2.9 - Booking Pricing Bypass

CVE-2023-4252

EventPrime <= 3.2.9 - Booking Pricing Bypass PUBLISHED

Description (CNA)

The EventPrime WordPress plugin through 3.2.9 specifies the price of a booking in the client request, allowing an attacker to purchase bookings without payment.

Affected (CNA)

Vendor / product	Versions
Unknown / EventPrime	affected 0 through 3.2.9

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/d2019e59-db6c-4014-8057-0644c9a00665

ADP enrichment

CVE

No English description supplied.

https://wpscan.com/vulnerability/d2019e59-db6c-4014-8057-0644c9a00665

CISA-ADP

No English description supplied.

No references supplied.