CVE-2023-51315

PHPJabbers Restaurant Booking System v3.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "seatname, pluginsmsapikey, pluginsmscountrycode, title, name" parameters...

CVE-2023-51308

PHPJabbers Car Park Booking System v3.0 is vulnerable to Multiple HTML Injection in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...

CVE-2023-51306

PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "name, title" parameters...

CVE-2024-13748

The Ultimate Classified Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Title parameter in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

PT-2025-7592 · Phpress · Ppress

Name of the Vulnerable Software and Affected Versions: Ppress version 0.0.9 Description: A stored Cross-Site Scripting vulnerability in the "related recommendations" feature allows a remote attacker to execute arbitrary code via a crafted script to the article.title, article.category, and...

PT-2025-7386 · WordPress · Ultimate Classified Listings

Name of the Vulnerable Software and Affected Versions: Ultimate Classified Listings plugin for WordPress versions up to, and including, 1.4 Description: The issue is related to Stored Cross-Site Scripting via the Title parameter due to insufficient input sanitization and output escaping. This...

CVE-2025-25973

A stored Cross Site Scripting vulnerability in the "related recommendations" feature in Ppress v.0.0.9 allows a remote attacker to execute arbitrary code via a crafted script to the article.title, article.category, and article.tags parameters...

PT-2025-7300 · Phpjabbers · Phpjabbers Restaurant Booking System

Name of the Vulnerable Software and Affected Versions: PHPJabbers Restaurant Booking System version 3.0 Description: The issue concerns multiple HTML injection vulnerabilities in the parameters name, plugin sms api key, plugin sms country code, and title. This allows for potential malicious HTML...

PT-2025-7301 · Phpjabbers · Phpjabbers Bus Reservation System

Name of the Vulnerable Software and Affected Versions: PHPJabbers Bus Reservation System version 1.1 Description: The issue concerns Multiple Stored Cross-Site Scripting XSS in the title and name parameters. This allows for malicious scripts to be stored and executed when a user accesses the...

CVE-2023-51325: Improper Neutralization of Input During Web Page Generation

PHPJabbers Shared Asset Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...

CVE-2023-51308: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

PHPJabbers Car Park Booking System v3.0 is vulnerable to Multiple HTML Injection in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...

PT-2025-7290

Name of the Vulnerable Software and Affected Versions PHPJabbers Event Ticketing System version 1.0 Description The issue concerns multiple stored Cross-Site Scripting XSS vulnerabilities in the name and title parameters. This allows for malicious scripts to be stored and executed on the system...

CVE-2023-51317: Improper Control of Generation of Code

PHPJabbers Restaurant Booking System v3.0 is vulnerable to Multiple HTML Injection in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...

PT-2025-7298

Name of the Vulnerable Software and Affected Versions PHPJabbers Restaurant Booking System version 3.0 Description The issue concerns multiple Stored Cross-Site Scripting XSS vulnerabilities in the parameters seat name, plugin sms api key, plugin sms country code, title, and name. This allows for...

CVE-2023-51318: Improper Neutralization of Input During Web Page Generation

PHPJabbers Bus Reservation System v1.1 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...

PT-2025-7318

Name of the Vulnerable Software and Affected Versions PHPJabbers Meeting Room Booking System version 1.0 Description The issue concerns multiple stored Cross-Site Scripting XSS vulnerabilities in the title and name parameters of the index.php page. This allows for the potential execution of...

CVE-2023-51338: Improper Neutralization of Input During Web Page Generation

PHPJabbers Meeting Room Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters of index.php page...

CVE-2023-51335

PHPJabbers Cinema Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...

CVE-2023-51335: Improper Neutralization of Input During Web Page Generation

PHPJabbers Cinema Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...

CVE-2023-51315: Improper Neutralization of Input During Web Page Generation

PHPJabbers Restaurant Booking System v3.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "seatname, pluginsmsapikey, pluginsmscountrycode, title, name" parameters...