CVE Catalog
CVE-2026-61950
CriticalCVSS 9.3Summary
The TrueBooker plugin versions up to 1.2.3 are vulnerable to unauthenticated SQL injection.
Risk Assessment
An unauthenticated attacker can execute arbitrary SQL queries, potentially leading to data leakage or modification.
Recommendation
It is recommended to update the TrueBooker plugin to a version later than 1.2.3.
Original NVD description (English source)
Unauthenticated SQL Injection in TrueBooker <= 1.2.3 versions.