| |
Vulnerability CVE-2024-6924
Published: 2024-09-08
| Description: |
The TrueBooker WordPress plugin before 1.0.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection. |
References: |
https://wpscan.com/vulnerability/39e79801-6ec7-4579-bc6b-fd7e899733a8/
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
