Lucene search
+L

10742 matches found

osv_cve
osv_cve
•added 2023/12/07 7:15 a.m.•24 views

CVE-2023-48833

A lack of rate limiting in pjActionAJaxSend in Time Slots Booking Calendar 4.0 allows attackers to cause resource exhaustion...

7.5CVSS5.8AI score0.01051EPSS
SaveExploits2References2
osv_cve
osv_cve
•added 2023/12/07 7:15 a.m.•23 views

CVE-2023-48836

Car Rental Script 3.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS issues via the name, pluginsmsapikey, pluginsmscountrycode, calendarid, title, country name, or customername parameter...

5.4CVSS5.8AI score0.00465EPSS
SaveExploits2References2
osv_cve
osv_cve
•added 2023/12/07 7:15 a.m.•28 views

CVE-2023-48827

Time Slots Booking Calendar 4.0 is vulnerable to Multiple HTML Injection issues via the name, pluginsmsapikey, pluginsmscountrycode, calendarid, title, country name, or customername parameter...

5.4CVSS5.8AI score0.00465EPSS
SaveExploits2References2
osv_cve
osv_cve
•added 2023/12/07 7:15 a.m.•20 views

CVE-2023-48828

Time Slots Booking Calendar 4.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS issues via the name, pluginsmsapikey, pluginsmscountrycode, calendarid, title, country name, or customername parameter...

5.4CVSS5.8AI score0.00465EPSS
SaveExploits2References2
NVD
NVD
•added 2023/12/07 7:15 a.m.•45 views

CVE-2023-48825

Availability Booking Calendar 5.0 is vulnerable to Multiple HTML Injection issues via SMS API Key or Default Country Code...

5.4CVSS0.00453EPSS
SaveExploits2References1
NVD
NVD
•added 2023/12/07 7:15 a.m.•40 views

CVE-2023-48828

Time Slots Booking Calendar 4.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS issues via the name, pluginsmsapikey, pluginsmscountrycode, calendarid, title, country name, or customername parameter...

5.4CVSS0.00465EPSS
SaveExploits2References2
attackerkb
attackerkb
•added 2023/12/07 7:15 a.m.•18 views

CVE-2023-48828

Time Slots Booking Calendar 4.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS issues via the name, pluginsmsapikey, pluginsmscountrycode, calendarid, title, country name, or customername parameter...

5.4CVSS6AI score0.00465EPSS
SaveExploits2References3
NVD
NVD
•added 2023/12/07 7:15 a.m.•32 views

CVE-2023-48826

Time Slots Booking Calendar 4.0 is vulnerable to CSV Injection via the unique ID field of the Reservations List...

8.8CVSS0.01201EPSS
SaveExploits2References2
osv_cve
osv_cve
•added 2023/12/07 7:15 a.m.•20 views

CVE-2023-48826

Time Slots Booking Calendar 4.0 is vulnerable to CSV Injection via the unique ID field of the Reservations List...

8.8CVSS5.8AI score0.01201EPSS
SaveExploits2References2
attackerkb
attackerkb
•added 2023/12/07 7:15 a.m.•11 views

CVE-2023-48827

Time Slots Booking Calendar 4.0 is vulnerable to Multiple HTML Injection issues via the name, pluginsmsapikey, pluginsmscountrycode, calendarid, title, country name, or customername parameter...

5.4CVSS6.1AI score0.00465EPSS
SaveExploits2References3
osv_cve
osv_cve
•added 2023/12/07 7:15 a.m.•23 views

CVE-2023-48825

Availability Booking Calendar 5.0 is vulnerable to Multiple HTML Injection issues via SMS API Key or Default Country Code...

5.4CVSS5.8AI score0.00453EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2023/12/07 7:15 a.m.•16 views

CVE-2023-48825

Availability Booking Calendar 5.0 is vulnerable to Multiple HTML Injection issues via SMS API Key or Default Country Code...

5.4CVSS6.1AI score0.00453EPSS
SaveExploits2References2
attackerkb
attackerkb
•added 2023/12/07 7:15 a.m.•9 views

CVE-2023-48826

Time Slots Booking Calendar 4.0 is vulnerable to CSV Injection via the unique ID field of the Reservations List...

8.8CVSS7.3AI score0.01201EPSS
SaveExploits2References3
NVD
NVD
•added 2023/12/07 7:15 a.m.•38 views

CVE-2023-48827

Time Slots Booking Calendar 4.0 is vulnerable to Multiple HTML Injection issues via the name, pluginsmsapikey, pluginsmscountrycode, calendarid, title, country name, or customername parameter...

5.4CVSS0.00465EPSS
SaveExploits2References2
osv_cve
osv_cve
•added 2023/12/07 7:15 a.m.•22 views

CVE-2023-48208

A Cross Site Scripting vulnerability in Availability Booking Calendar 5.0 allows an attacker to inject JavaScript via the name, pluginsmsapikey, pluginsmscountrycode, uuid, title, or country name parameter to index.php...

6.1CVSS5.8AI score0.00499EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2023/12/07 7:15 a.m.•9 views

CVE-2023-48208

A Cross Site Scripting vulnerability in Availability Booking Calendar 5.0 allows an attacker to inject JavaScript via the name, pluginsmsapikey, pluginsmscountrycode, uuid, title, or country name parameter to index.php...

6.1CVSS5.8AI score0.00499EPSS
SaveExploits2References2
NVD
NVD
•added 2023/12/07 7:15 a.m.•39 views

CVE-2023-48208

A Cross Site Scripting vulnerability in Availability Booking Calendar 5.0 allows an attacker to inject JavaScript via the name, pluginsmsapikey, pluginsmscountrycode, uuid, title, or country name parameter to index.php...

6.1CVSS0.00499EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2023/12/07 7:15 a.m.•11 views

CVE-2023-48207

Availability Booking Calendar 5.0 allows CSV injection via the unique ID field in the Reservations list component...

8.8CVSS5.8AI score0.01166EPSS
SaveExploits3References2
osv_cve
osv_cve
•added 2023/12/07 7:15 a.m.•22 views

CVE-2023-48207

Availability Booking Calendar 5.0 allows CSV injection via the unique ID field in the Reservations list component...

8.8CVSS5.8AI score0.01166EPSS
SaveExploits3References1
Prion
Prion
•added 2023/12/07 7:15 a.m.•28 views

Input validation

Time Slots Booking Calendar 4.0 is vulnerable to CSV Injection via the unique ID field of the Reservations List...

6.5CVSS7.4AI score0.01201EPSS
SaveExploits2References2Affected Software1
Rows per page
Query Builder