PT-2025-7298

Name of the Vulnerable Software and Affected Versions PHPJabbers Restaurant Booking System version 3.0 Description The issue concerns multiple Stored Cross-Site Scripting XSS vulnerabilities in the parameters seat name, plugin sms api key, plugin sms country code, title, and name. This allows for...

CVE-2023-51303

PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple HTML Injection in the "lid, name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...

CVE-2023-51300

PHPJabbers Hotel Booking System v4.0 is vulnerable to Cross-Site Scripting XSS vulnerabilities in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey" parameters...

CVE-2023-51299

PHPJabbers Hotel Booking System v4.0 is vulnerable to HTML Injection in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...

CVE-2023-51300: Improper Neutralization of Input During Web Page Generation

PHPJabbers Hotel Booking System v4.0 is vulnerable to Cross-Site Scripting XSS vulnerabilities in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey" parameters...

CVE-2023-51305: Improper Neutralization of Input During Web Page Generation

PHPJabbers Car Park Booking System v3.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey" parameters...

CVE-2023-51299: Improper Neutralization of Input During Web Page Generation

PHPJabbers Hotel Booking System v4.0 is vulnerable to HTML Injection in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...

PT-2025-7285

Name of the Vulnerable Software and Affected Versions PHPJabbers Hotel Booking System version 4.0 Description The PHPJabbers Hotel Booking System is affected by Cross-Site Scripting XSS vulnerabilities in the name, plugin sms api key, plugin sms country code, and title parameters. This issue allo...

CVE-2023-51303: Improper Neutralization of Input During Web Page Generation

PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple HTML Injection in the "lid, name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...

PT-2025-7281

Name of the Vulnerable Software and Affected Versions PHPJabbers Event Booking Calendar version 4.0 Description The issue concerns a Cross-Site Scripting XSS vulnerability that affects the "name", plugin sms api key, plugin sms country code, and "title" parameters. This allows attackers to execut...

PT-2025-7288 · Phpjabbers · Phpjabbers Event Ticketing System

Name of the Vulnerable Software and Affected Versions: PHPJabbers Event Ticketing System version 1.0 Description: The PHPJabbers Event Ticketing System is vulnerable to multiple HTML injections in the parameters lid, name, plugin sms api key, plugin sms country code, and title. This issue allows...

PT-2025-7289

Name of the Vulnerable Software and Affected Versions PHPJabbers Car Park Booking System version 3.0 Description The issue concerns Multiple Stored Cross-Site Scripting XSS in the parameters name, plugin sms api key, plugin sms country code, and title. This allows for the potential execution of...

PT-2025-7284

Name of the Vulnerable Software and Affected Versions PHPJabbers Hotel Booking System version 4.0 Description The issue concerns HTML Injection in the name, plugin sms api key, plugin sms country code, and title parameters. This allows for the injection of malicious HTML code, potentially leading...

CVE-2023-51296: Improper Neutralization of Input During Web Page Generation

PHPJabbers Event Booking Calendar v4.0 is vulnerable to Cross-Site Scripting XSS in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey" parameters which allows attackers to execute arbitrary code...

CVE-2024-13704

The Super Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'stusertitle' parameter in all versions up to, and including, 4.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

PT-2025-6600

Name of the Vulnerable Software and Affected Versions Super Testimonials plugin for WordPress versions up to and including 4.0.1 Description The issue is related to Stored Cross-Site Scripting, which allows unauthenticated attackers to inject arbitrary web scripts in pages. This is possible due t...

CVE-2025-25988

Cross Site Scripting vulnerability in hooskcms v.1.8 allows a remote attacker to cause a denial of service via the custom Link title parameter and the Title parameter...

CVE-2025-25988

Cross Site Scripting vulnerability in hooskcms v.1.8 allows a remote attacker to cause a denial of service via the custom Link title parameter and the Title parameter...

CVE-2025-25988: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in hooskcms v.1.8 allows a remote attacker to cause a denial of service via the custom Link title parameter and the Title parameter...

Hoosk 安全漏洞

Hoosk is a lightweight content management system from the individual developers at Havok. A security vulnerability exists in Hoosk version 1.8, which stems from the Link title and Title parameters causing a denial of service by a remote attacker...