Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 19:49:01 +0000 CVE-2024-7129 — Appointment Booking Calendar < 1.6.7.43 - Admin+ Template Injection to RCE https://cve.radiocsirt.org/vuln/cve-2024-7129 <p><strong>Affected:</strong> Unknown Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin, nsquared appointment_booking_calendar</p> <p>The Appointment Booking Calendar WordPress plugin before 1.6.7.43 does not escape template syntax provided via user input, leading to Twig Template Injection which further exploited can result to remote code Execution by high privilege such as admins</p> <p><strong>Affected:</strong> Unknown Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin, nsquared appointment_booking_calendar</p> <p>The Appointment Booking Calendar WordPress plugin before 1.6.7.43 does not escape template syntax provided via user input, leading to Twig Template Injection which further exploited can result to remote code Execution by high privilege such as admins</p> https://cve.radiocsirt.org/vuln/cve-2024-7129