CVE-2022-0720

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

The Amelia WordPress plugin before 1.0.47 does not have proper authorisation when managing appointments, allowing any customer to update other's booking, as well as retrieve sensitive information about the bookings, such as the full name and phone number of the person who booked it.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-863

Affected software

No affected versions have been published.

Timeline

Published
Mar 28, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-07216.5Insertion of Sensitive Information Into Debugging Code in GitHub repository microweber/microweber prior to 1.3.CVE-2022-07227.5Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url prior to 7.0.0.CVE-2022-07235.4Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.11.CVE-2022-07246.5Insecure Storage of Sensitive Information in GitHub repository microweber/microweber prior to 1.3.CVE-2022-07257.5A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information ExpoCVE-2022-07265.4Missing Authorization in GitHub repository chocobozzz/peertube prior to 4.1.0.CVE-2022-07275.4Improper Access Control in GitHub repository chocobozzz/peertube prior to 4.1.0.CVE-2022-07284.8The Easy Smooth Scroll Links WordPress plugin before 2.23.1 does not sanitise and escape its settings, which could allow high privilege userCVE-2022-07298.8Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440.CVE-2022-07309.8Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.CVE-2022-07316.5Improper Access Control (IDOR) in GitHub repository dolibarr/dolibarr prior to 16.0.CVE-2022-07327.5The backend infrastructure shared by multiple mobile device monitoring services does not adequately authenticate or authorize API requests,
CVE-2022-0720: Medium severity, CVSS 5.4 | Vulnix