CVE-2024-37499: WordPress Online Booking & Scheduling Calendar for WordPress plugin <= 4.4.2 - Local File Inclusion vulnerability
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in vCita Online Booking & Scheduling Calendar for WordPress by vcita allows Path Traversal.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a through 4.4.2.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-37499?
CVE-2024-37499 is classified as a path traversal vulnerability which can lead to unauthorized access to filesystem paths.
How do I fix CVE-2024-37499?
To fix CVE-2024-37499, update the vCita Online Booking & Scheduling Calendar plugin to version 4.4.3 or higher.
What versions of the vCita calendar are affected by CVE-2024-37499?
CVE-2024-37499 affects vCita Online Booking & Scheduling Calendar versions up to and including 4.4.2.
What are the consequences of CVE-2024-37499?
The consequences of CVE-2024-37499 can include unauthorized access to sensitive files on the server.
Is CVE-2024-37499 being exploited in the wild?
As of now, there is no public information indicating that CVE-2024-37499 is actively being exploited in the wild.