Appointment Scheduler Security Vulnerabilities and Issues — Appointment Scheduler CVE List

Lucene search

PhpjabbersAppointment Scheduler

3 matches found

CVE•added 2015/01/13 11:59 a.m.•32 views

CVE-2014-10010

Directory traversal vulnerability in PHPJabbers Appointment Scheduler 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the id parameter in a pjActionDownload action to the pjBackup controller.

5CVSS6.9AI score0.07214EPSS

CVE•added 2023/12/07 7:15 a.m.•27 views

CVE-2023-48838

Appointment Scheduler 3.0 is vulnerable to Multiple HTML Injection issues via the SMS API Key or Default Country Code.

5.4CVSS5.7AI score0.00176EPSS

CVE•added 2023/12/07 7:15 a.m.•25 views

CVE-2023-48839

Appointment Scheduler 3.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via the name, plugin_sms_api_key, plugin_sms_country_code, calendar_id, title, country name, or customer_name parameter.

5.4CVSS5.2AI score0.00169EPSS