Advisories · Technology
GravityMore Gravity Bookings.
Every CVE that names GravityMore Gravity Bookings among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
Gravity Forms Booking <= 2.7.1 - Authenticated (Subscriber+) Time-Based SQL Injection via 'staff_id'
- GravityMore Gravity Bookings
- SQL injection
- CVSS 7.5 High
Gravity Bookings <= 2.5.9 - Unauthenticated SQL Injection via 'category_id' Parameter
- GravityMore Gravity Bookings
- SQL injection