Appointment Scheduler Security Vulnerabilities and Issues — Appointment Scheduler CVE List

Lucene search

PhpjabbersAppointment Scheduler

4 matches found

CVE•added 2023/12/07 7:15 a.m.•27 views

CVE-2023-48838

Appointment Scheduler 3.0 is vulnerable to Multiple HTML Injection issues via the SMS API Key or Default Country Code.

5.4CVSS5.7AI score0.00176EPSS

CVE•added 2023/12/07 7:15 a.m.•26 views

CVE-2023-48840

A lack of rate limiting in pjActionAjaxSend in Appointment Scheduler 3.0 allows attackers to cause resource exhaustion.

7.5CVSS7.4AI score0.00144EPSS

CVE•added 2023/12/07 7:15 a.m.•25 views

CVE-2023-48839

Appointment Scheduler 3.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via the name, plugin_sms_api_key, plugin_sms_country_code, calendar_id, title, country name, or customer_name parameter.

5.4CVSS5.2AI score0.00169EPSS

CVE•added 2023/12/07 7:15 a.m.•18 views

CVE-2023-48841

Appointment Scheduler 3.0 is vulnerable to CSV Injection via a Language > Labels > Export action.

8.8CVSS8.6AI score0.00217EPSS