Skip to content
OpenAdvisories
High · 8.5 CVE-2024-53815 EUVD-2024-52147GHSA-83hw-j99p-2rr2

WordPress Pinpoint Booking System plugin <= 2.9.9.5.2 - SQL Injection vulnerability

Published Dec 6, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DOTonPAPER Pinpoint Booking System booking-system allows Blind SQL Injection.This issue affects Pinpoint Booking System: from n/a through <= 2.9.9.5.1.

Affected products

VendorProductAffectedFixed
DOTonPAPER Pinpoint Booking System ≤ 2.9.9.5.1 —

References