Threats tagged 'ghsa-cqhr-hh3v-cw85'

The Gravity Bookings Premium plugin for WordPress contains a SQL Injection vulnerability in all versions up to and including 2.5.9. This flaw arises from insufficient escaping of user-supplied parameters and inadequate preparation of SQL queries, allowing unauthenticated attackers to append malicious SQL code. Exploitation can lead to unauthorized extraction of sensitive database information. The vulnerability has a high severity rating with a CVSS score of 7.5. No patch or remediation information is provided in the available data.