
CVE@CVEnew
Disclosure
CVE-2016-20069 WordPress Booking Calendar Contact Form 1.0.23 contains an unauthenticated blind SQL injection vulnerability in the shortcode function that fails to sanitize the cale… https://www.cve.org/CVERecord?id=CVE-2016-20069
Post summary
The passage announces CVE‑2016‑20069, a blind SQL injection flaw in WordPress Booking Calendar 1.0.23’s shortcode function due to missing input sanitization.
00000152
57.6K followersView on X
