| |
Vulnerability CVE-2022-3982
Published: 2022-12-12
| Description: |
The Booking calendar, Appointment Booking System WordPress plugin before 3.2.2 does not validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE |
Type:
CWE-434 (Unrestricted Upload of File with Dangerous Type)
References: |
https://wpscan.com/vulnerability/4d91f3e1-4de9-46c1-b5ba-cc55b7726867
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
