CVE-2023-24407

Summary

CVE-2023-24407 is a critical authorization vulnerability affecting the WpDevArt Booking calendar and Appointment Booking System. The flaw permits unauthorized access due to incorrectly configured security levels. This issue poses a serious risk, enabling exploitation of the affected software versions from n/a through 3.2.3. Attackers can potentially manipulate appointments, access sensitive data, or gain unauthorized control. System administrators are advised to apply the latest patches to mitigate this vulnerability and secure their installations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.