CVE-2023-25037
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Summary
CVE-2023-25037 is a Missing Authorization vulnerability affecting the CodePeople Booking Calendar Contact Form. This issue arises due to incorrectly configured access control security levels, allowing unauthorized access and potential exploitation. The vulnerability can be found in versions 1.2.34 and below of the Booking Calendar Contact Form. Unauthorized users may be able to manipulate data or gain unintended access to sensitive information, posing a significant security risk. It is recommended that users of the affected version upgrade to a secured version as soon as possible.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.