CVE-2023-1977 (published 2023-08-16T11:03:28.672Z)
The Booking Manager WordPress plugin before 2.0.29 does not validate URLs input in it's admin panel or in shortcodes for showing events from a remote .ics file, allowing an attacker with privileges as low as Subscriber to perform SSRF attacks on the sites internal network.
Affected products: Vendor: Unknown
Product: Booking Manager
Versions: 0