mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-30 09:09:31 +02:00
805 B
805 B
CVE-2023-0220
Description
The Pinpoint Booking System WordPress plugin before 2.9.9.2.9 does not validate and escape one of its shortcode attributes before using it in a SQL statement, which could allow any authenticated users, such as subscriber to perform SQL Injection attacks.
POC
Reference
Github
No PoCs found on GitHub currently.