CVE-2023-46914: Bookingcalendar Project Bookingcalendar

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

SQL Injection vulnerability in RM bookingcalendar module for PrestaShop versions 2.7.9 and before, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via ics_export.php.

Affected products

• Bookingcalendar Project Bookingcalendar: up to and including 2.7.9

Published 2024-02-07. Last modified 2026-06-17.