CVE-2024-7129
HIGHCVSS v3
7.2
HIGH
EPSS Score
15.6%
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Description
The Appointment Booking Calendar WordPress plugin before 1.6.7.43 does not escape template syntax provided via user input, leading to Twig Template Injection which further exploited can result to remote code Execution by high privilege such as admins
Technical Details
- Published
- 9/13/2024
Frequently Asked Questions
What is CVE-2024-7129?
The Appointment Booking Calendar WordPress plugin before 1.6.7.43 does not escape template syntax provided via user input, leading to Twig Template Injection which further exploited can result to remote code Execution by high privilege such as admins
Is CVE-2024-7129 actively exploited?
Active exploitation of CVE-2024-7129 has not been confirmed. The EPSS score is 15.6%, indicating the estimated probability of exploitation in the next 30 days.
What is the CVSS score for CVE-2024-7129?
CVE-2024-7129 has a CVSS v3 base score of 7.2 (HIGH severity).
Is CVE-2024-7129 affecting your environment?
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.