CVE-2023-37389: WordPress Booking Package SAASPROJECT plugin <= 1.5.98 - Unauthenticated Privilege Escalation vulnerability
Published May 17, 2024
·Updated
Improper Privilege Management vulnerability in SAASPROJECT Booking Package Booking Package allows Privilege Escalation.This issue affects Booking Package: from n/a through 1.5.98.
Affected Software
2 affected components
SAASPROJECT Booking Package<=1.5.98
WordPress Booking Package<=1.5.98
Remediation
Information
Update to 1.5.99 or a higher version.
Event History
May 17, 2024
CVE Published
via MITRE·06:47 AM
Data Sourced
via MITRE·06:47 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·07:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-37389?
CVE-2023-37389 is classified as a high severity vulnerability due to its potential for privilege escalation.
2
How do I fix CVE-2023-37389?
To fix CVE-2023-37389, update the SAASPROJECT Booking Package to the latest version beyond 1.5.98.
3
What is the impact of CVE-2023-37389?
The impact of CVE-2023-37389 allows unauthorized users to escalate their privileges within the booking system.
4
Is CVE-2023-37389 specific to a version of Booking Package?
Yes, CVE-2023-37389 affects the Booking Package version up to and including 1.5.98.
5
Who is affected by CVE-2023-37389?
Users of the Booking Package plugin from SAASPROJECT and WordPress using version 1.5.98 or lower are affected by CVE-2023-37389.