VULNERABILITY INTELLIGENCE

CVE-2024-5071

CVSS score6.5 MEDIUM
EPSS probability0.40%
CISA KEVNot currently listed
Published2024-06-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Description

The Bookster WordPress plugin through 1.1.0 allows adding sensitive parameters when validating appointments allowing attackers to manipulate the data sent when booking an appointment (the request body) to change its status from pending to approved.

Weakness classification

  • CWE-863: Incorrect Authorization

Primary references