PT-2023-16093 · WordPress · Pinpoint Booking System

Lana Codes · Publicado 2023-02-13 · Atualizado 2025-03-21 · CVE-2023-0220

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Pinpoint Booking System WordPress plugin versions prior to 2.9.9.2.9

Description The issue allows authenticated users to perform SQL Injection attacks due to the lack of validation and escaping of a shortcode attribute used in a SQL statement.

Recommendations For versions prior to 2.9.9.2.9, update to version 2.9.9.2.9 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2023-0220

Produtos afetados

Pinpoint Booking System

Referências · 4

• 🔥 https://wpscan.com/vulnerability/d6d976be-31d1-419d-8729-4a36fbd2755c · Exploit
• https://t.me/cvenotify/115689 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-0220 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-0220 · Aviso do Fabricante