CVE-2023-3970

CVE-2023-3970 concerns the GZ Scripts Availability Booking Calendar PHP 1.0, specifically the Image Handler component. The vulnerability affects the file /index.php?controller=GzUser&action=edit&id=1 and arises from manipulation of the img argument, leading to cross-site scripting. Exploitation i...

CVE-2023-3969

CVE-2023-3969 affects GZ Scripts Availability Booking Calendar PHP 1.0. The vulnerability lies in the HTTP POST Request Handler (index.php) where manipulation of the promo_code argument enables cross-site scripting. Exploitation is described as remote with the public disclosure of the exploit. Af...

CVE-2023-3543

CVE-2023-3543 affects GZ Scripts Availability Booking Calendar PHP 1.8. The vulnerability is in the HTTP POST Request Handler’s load.php, where manipulating parameters cid, first_name, second_name, address_1, or country enables cross-site scripting. It is possible to initiate the attack remotely....