high7.5
CVE-2018-10363
An issue was discovered in the WpDevArt "Booking calendar, Appointment Booking System" plugin 2.2.2 for WordPress.
Impact
An issue was discovered in the WpDevArt "Booking calendar, Appointment Booking System" plugin 2.2.2 for WordPress. Multiple parameters allow remote attackers to manipulate the values to change data such as prices.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wpdevart | Booking Calendar | Version 2.2.2 |