Diary & Availability Calendar <= 1.0.3 - Authenticated (Subscriber+) SQL Injection
highThe daac_delete_booking_callback function, hooked to the daac_delete_booking AJAX action, takes the id POST parameter which is passed into the SQL statement without proper sanitisation, validation or escaping, leading to a SQL Injection issue. Furthermore, the ajax action is lacking any CSRF and capability check, makin...
- CVSS:
- 8.8
- Affected:
- up to 1.0.3
- Fix:
- No patched version reported
- Disclosed:
- Jul 23, 2021