CVE-2024-7129

CVE-2024-7129 is a high-severity Twig Template Injection vulnerability affecting the Appointment Booking Calendar WordPress plugin prior to version 1.6.7.43. This flaw allows high-privileged users, such as administrators, to inject template syntax, which can be further exploited to achieve remote code execution. The vulnerability has a CVSS score of 7.2 (HIGH) due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this CVE.