Unrated severityNVD Advisory· Published Dec 26, 2023· Updated Aug 2, 2024
Hotel Booking Lite < 4.8.5 - Unauthenticated Arbitrary File Download & Deletion
CVE-2023-5991
Description
The Hotel Booking Lite WordPress plugin before 4.8.5 does not validate file paths provided via user input, as well as does not have proper CSRF and authorisation checks, allowing unauthenticated users to download and delete arbitrary files on the server
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/Hotel Booking Lite WordPress plugindescription
- Range: <4.8.5
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/e9d35e36-1e60-4483-b8b3-5cbf08fcd49emitreexploitvdb-entrytechnical-description
News mentions
0No linked articles in our index yet.