CVE-2024-12274 — BookingPress < 1.1.23 - Unauthenticated Export File Download

CVE-2024-12274

BookingPress < 1.1.23 - Unauthenticated Export File Download PUBLISHED

Description (CNA)

The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.1.23 export settings functionality exports data to a public folder, with an easily guessable file name, allowing unauthenticated attackers to access the exported files (if they exist).

Affected (CNA)

Vendor / product	Versions
Unknown / Appointment Booking Calendar Plugin and Scheduling Plugin	affected 0 before 1.1.23

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/e3176c9a-63f3-4a28-a8a7-8abb2b4100ef/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.