wp-plugins/cp-appointment-calendar

wp-plugins/cp-appointment-calendar

www.pluginmirror.com

Releases2

Frequency1 year 2 months

Last Release over 11 years ago

WordPress.org Plugin Mirror

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2015-10099 ↗	Apr 10, 2023Monday, 10 April 2023, 12:15	6.3 MEDIUM	6.5 MEDIUM
A vulnerability classified as critical has been found in CP Appointment Calendar Plugin up to 1.1.5 on WordPress. This affects the function dex_process_ready_to_go_appointment of the file dex_appointments.php. The manipulation of the argument itemnumber leads to sql injection. It is possible to initiate the attack remotely. The patch is named e29a9cdbcb0f37d887dd302a05b9e8bf213da01d. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-225351.