← CVE Intelligence

CVE-2024-5071

Bookster <= 1.1.0 - Unauthenticated Appointment Status Update PUBLISHED

Description (CNA)

The Bookster WordPress plugin through 1.1.0 allows adding sensitive parameters when validating appointments allowing attackers to manipulate the data sent when booking an appointment (the request body) to change its status from pending to approved.

Affected (CNA)

Vendor / productVersions
Unknown / Bookster affected 0 through 1.1.0

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.