CVE-2023-4691 (published 2023-10-16T19:39:05.138Z)
The WordPress Online Booking and Scheduling Plugin WordPress plugin before 22.4 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin
Affected products: Vendor: Unknown
Product: WordPress Online Booking and Scheduling Plugin
Versions: 0