Lucene search
K

17 matches found

RedhatCVE
RedhatCVE
added 2026/01/06 5:7 p.m.3 views

CVE-2024-30516

Improper Validation of Specified Quantity in Input vulnerability in SaasProject Booking Package allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Booking Package: from n/a through 1.6.27...

7.5CVSS6.8AI score0.00165EPSS
Exploits0References1
EUVD
EUVD
added 2026/01/05 4:38 p.m.1 views

EUVD-2024-28436

Improper Validation of Specified Quantity in Input vulnerability in SaasProject Booking Package allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Booking Package: from n/a through 1.6.27...

7.5CVSS8.3AI score0.00165EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/01/05 12:0 a.m.2 views

PT-2026-1296

Name of the Vulnerable Software and Affected Versions SaasProject Booking Package versions through 1.6.27 Description An issue exists in SaasProject Booking Package related to improper validation of specified quantity in input, potentially allowing access to functionality not properly constrained...

7.5CVSS6.6AI score0.00165EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-43616

Malicious code in bioql PyPI...

7.1CVSS7AI score0.00104EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:41 a.m.4 views

CVE-2023-39918

Unauth. Reflected Cross-Site Scripting XSS vulnerability in SAASPROJECT Booking Package Booking Package plugin = 1.6.01 versions...

7.1CVSS5.9AI score0.00104EPSS
Exploits0
NVD
NVD
added 2024/05/17 7:15 a.m.9 views

CVE-2023-37389

Improper Privilege Management vulnerability in SAASPROJECT Booking Package Booking Package allows Privilege Escalation.This issue affects Booking Package: from n/a through 1.5.98...

8.8CVSS8.8AI score0.00478EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/05/17 6:47 a.m.22 views

CVE-2023-37389 WordPress Booking Package SAASPROJECT plugin <= 1.5.98 - Unauthenticated Privilege Escalation vulnerability

Improper Privilege Management vulnerability in SAASPROJECT Booking Package Booking Package allows Privilege Escalation.This issue affects Booking Package: from n/a through 1.5.98...

8.8CVSS8.8AI score0.00478EPSS
Exploits0References1
CVE
CVE
added 2024/05/17 6:47 a.m.53 views

CVE-2023-37389

CVE-2023-37389 relates to SAASPROJECT Booking Package Plugin for WordPress, where versions 1.5.98 and earlier suffer an unauthenticated privilege escalation due to improper privilege management. The Patchstack entry confirms the vulnerable component and the root cause as Privilege Escalation with...

8.8CVSS6.8AI score0.00478EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/05/17 6:47 a.m.15 views

CVE-2023-37389 WordPress Booking Package SAASPROJECT plugin <= 1.5.98 - Unauthenticated Privilege Escalation vulnerability

Improper Privilege Management vulnerability in SAASPROJECT Booking Package Booking Package allows Privilege Escalation.This issue affects Booking Package: from n/a through 1.5.98...

8.8CVSS8.8AI score0.00478EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/05/17 12:0 a.m.2 views

PT-2024-12607 · Unknown · Saasproject Booking Package

Name of the Vulnerable Software and Affected Versions: SAASPROJECT Booking Package versions 1.5.98 and earlier Description: The issue is related to Improper Privilege Management, which allows Privilege Escalation in the SAASPROJECT Booking Package. Recommendations: For versions 1.5.98 and earlier...

8.8CVSS9.4AI score0.00478EPSS
Exploits0References4
OSV
OSV
added 2023/09/04 11:15 a.m.0 views

CVE-2023-39918

Unauth. Reflected Cross-Site Scripting XSS vulnerability in SAASPROJECT Booking Package Booking Package plugin = 1.6.01 versions...

6.1CVSS7.3AI score
Exploits0References1
NVD
NVD
added 2023/09/04 11:15 a.m.10 views

CVE-2023-39918

Unauth. Reflected Cross-Site Scripting XSS vulnerability in SAASPROJECT Booking Package Booking Package plugin = 1.6.01 versions...

7.1CVSS6.2AI score0.00104EPSS
Exploits0References1
Prion
Prion
added 2023/09/04 11:15 a.m.11 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in SAASPROJECT Booking Package Booking Package plugin = 1.6.01 versions...

5.8CVSS6AI score0.00104EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/09/04 10:5 a.m.12 views

CVE-2023-39918 WordPress Booking Package Plugin <= 1.6.01 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in SAASPROJECT Booking Package Booking Package plugin = 1.6.01 versions...

7.1CVSS6.3AI score0.00104EPSS
Exploits0References1
CVE
CVE
added 2023/09/04 10:5 a.m.34 views

CVE-2023-39918

CVE-2023-39918 affects the SAASPROJECT Booking Package WordPress plugin (versions

7.1CVSS6AI score0.00104EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/09/04 12:0 a.m.2 views

PT-2023-27153 · Unknown · Saasproject Booking Package

Name of the Vulnerable Software and Affected Versions: SAASPROJECT Booking Package plugin versions = 1.6.01 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to...

7.1CVSS6.4AI score0.00104EPSS
Exploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2021/11/10 12:0 a.m.17 views

JVN#68066589: WordPress Plugin "Booking Package - Appointment Booking Calendar System" vulnerable to cross-site scripting

WordPress Plugin "Booking Package - Appointment Booking Calendar System" provided by Saasproject contains a cross-site scripting vulnerability CWE-79 due to the flaw in handling some URL query parameters. Impact An arbitrary script may be executed on the web browser of the user who is accessing t...

6.1CVSS6AI score0.00668EPSS
Exploits0
Rows per page
Query Builder