{"cvss":0.0,"datePublished":"2019-08-05T00:00:00Z","dateUpdated":"2019-08-05T00:00:00Z","description":"The nd-booking plugin before 2.5 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.","dueDate":"","id":"CVE-2019-15774","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"booking","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"booking_project booking URL Redirection to Untrusted Site","vendor":"booking_project"}