by Kastro
Paper/Archive/CVE-2022-1952

CVE-2022-1952

Unknown Free Booking Plugin for Hotels, Restaurant and Car Rental – eaSYNC — eaSYNC < 1.1.16 - Unauthenticated Arbitrary File Upload

EPSS 25%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 97.9.979 × 2019.6No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

The Free Booking Plugin for Hotels, Restaurant and Car Rental WordPress plugin before 1.1.16 suffers from insufficient input validation which leads to arbitrary file upload and subsequently to remote code execution. An AJAX action accessible to unauthenticated users is affected by this issue. An allowlist of valid file extensions is defined but is not used during the validation steps.

Affected

ProductAffectedFixed inSource
Free Booking Plugin for Hotels, Restaurant and Car Rental – eaSYNC1.1.16 – < 1.1.161.1.16CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refwpscan.com/vulnerability/ecf61d17-8b07-4cb6-93a8-64c2c4fbbe04