Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP BASE WP BASE Booking…
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.5.2.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- WP BASE
- Product
- WP BASE Booking
- CVSS v3.1
- 9.3 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
- Exploitation
- SSVC none, automatable yes, impact partial
- Weakness
- CWE-89
- NVD status
- Deferred
Why it ranks 37 (Notable)
- CVSS v3.1 9.3 critical
- SSVC: automatable
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.