Read the docs

Elbtide

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Elbtide records in CISA KEV

No Elbtide vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Advanced Booking Calendar 7 records MEDIUM

Records

7 records

TI-2022-00608 CVE-2022-0694 · GHSA-2j39-64q5-rjfv

Advanced Booking Calendar < 1.7.0 - Unauthenticated SQL Injection

Priority MEDIUM 46

The Advanced Booking Calendar WordPress plugin before 1.7.0 does not validate and escape the calendar parameter before using it in a SQL statement via the abc_booking_getSingleCalendar AJAX action (available to both unau…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01849 Published 2022-03-21 Fixed in 1.7.0 CWE-89
TI-2022-00905 CVE-2022-1006 · GHSA-wr35-3f65-j6mc

Advanced Booking Calendar < 1.7.1 - Admin+ SQLi

Priority LOW 35

The Advanced Booking Calendar WordPress plugin before 1.7.1 does not sanitise and escape the id parameter when editing Calendars, which could allow high privilege users such as admin to perform SQL injection attacks

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01484 Published 2022-04-11 Fixed in 1.7.1 CWE-89
TI-2022-00906 CVE-2022-1007 · GHSA-84jw-8ppw-fjwr

Advanced Booking Calendar < 1.7.1 - Reflected Cross-Site Scripting

Priority LOW 31

The Advanced Booking Calendar WordPress plugin before 1.7.1 does not sanitise and escape the room parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting issue

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01868 Published 2022-04-11 Fixed in 1.7.1 CWE-79
Open these records in search →