Lucene search
MitreCVE-2023-48208HistoryDec 07, 2023 - 7:15 a.m.
CVE-2023-48208
2023-12-0707:15:09
CWE-79
mitre
web.nvd.nist.gov
11
cve-2023-48208
cross site scripting
availability booking calendar 5.0
javascript injection
security vulnerability
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
21.7%
A Cross Site Scripting vulnerability in Availability Booking Calendar 5.0 allows an attacker to inject JavaScript via the name, plugin_sms_api_key, plugin_sms_country_code, uuid, title, or country name parameter to index.php.
Affected configurations
Node
phpjabbersavailability_booking_calendarMatch5.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| phpjabbers | availability_booking_calendar | 5.0 | cpe:2.3:a:phpjabbers:availability_booking_calendar:5.0:*:*:*:*:*:*:* |
References
Related
cvelist
cvelist
CVE-2023-48208
2023-12-07 00:00:00
prion
prion
Cross site scripting
2023-12-07 07:15:00
nvd
nvd
CVE-2023-48208
2023-12-07 07:15:09
zdt
zdt
packetstorm
packetstorm
PHPJabbers Availability Booking Calendar 5.0 Cross Site Scripting
2023-11-20 00:00:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
21.7%
Related for CVE-2023-48208