Amelia – Events & Appointments Booking Calendar vulnerabilities
We track 1 vulnerability in Amelia – Events & Appointments Booking Calendar products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 21, 2022.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Amelia – Events & Appointments Booking Calendar vulnerabilities
- 8.8 High severity
Amelia – Events & Appointments Booking Calendar: Unrestricted Upload of File with Dangerous Type
The Amelia WordPress plugin before 1.0.47 stores image blobs into actual files whose extension is controlled by the user, which may lead to PHP backdoors being uploaded onto the site. This vulnerability can be exploited by logged-in users with the custom "Amel