CVE-2015-9460

Name of the Vulnerable Software and Affected Versions booking-system plugin versions prior to 2.1

Description The issue concerns a SQL injection vulnerability via the language parameter in the DOPBSPBackEndTranslation::display function. This allows for potential exploitation.

Recommendations For versions prior to 2.1, update to version 2.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the language parameter in the affected API endpoint until a patch is available.