WordPress Booking Calendar Contact Form 1.0.2 - Multiple vulnerabilities
In a site that has installed the plugin vulnerable and an attacker who has
an account
editor privileges can exploit the flaw SQL injection and possibly escalate
their privileges.
