BookingWizz versions prior to 5.5 suffer from having default administrative credentials, local file inclusion, cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities.
ac3224164fc281f5e02e53dfd05ba5f33417eddad677f722aad191b3626730a1