A vulnerability classified as critical was found in Appointment Booking Calendar Plugin up to 1.6.7.7 on WordPress. Affected by this vulnerability is an unknown functionality of the component Shortcode Handler. The manipulation leads to sql injection.

This vulnerability is known as CVE-2024-2342. The attack needs to be approached within the local network. There is no exploit available.