CVE-2015-9460 (pinpoint_booking_system)

The booking-system plugin before 2.1 for WordPress has DOPBSPBackEndTranslation::display SQL injection via the language parameter.

View Full Alert