CVE-2023-51313

PHPJabbers Restaurant Booking System v3.0 is vulnerable to a CSV Injection vulnerability that allows an attacker to execute remote code . The root cause is insufficient input validation on the Languages section Labels any parameters field within System Options , which is used to construct CSV fil...

CVE-2023-51317

The PHPJabbers Restaurant Booking System v3.0 is vulnerable to Multiple HTML Injection (and reflective/stored cross-site scripting) due to improper handling of the name, plugin_sms_api_key, plugin_sms_country_code, and title parameters. This flaw allows for the injection of malicious HTML code, w...

CVE-2023-51314

The PHPJabbers Restaurant Booking System v3.0 is vulnerable to a lack of rate limiting in its 'Forgot Password' and 'Email Settings' features. This flaw allows an attacker to trigger an excessive amount of emails for a legitimate user, potentially resulting in a Denial of Service (DoS) due to the...

CVE-2023-51312

The PHPJabbers Restaurant Booking System v3.0 is vulnerable to Reflected Cross-Site Scripting (XSS) and HTML Injection . The flaw is located in the Reservations menu within the Schedule section's date parameter , where improper neutralization of input during web page generation allows for malicio...

CVE-2023-51315

The PHPJabbers Restaurant Booking System v3.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) and HTML injection . The issue is caused by improper neutralization of input in the seat_name, plugin_sms_api_key, plugin_sms_country_code, title, and name parameters. This allows for the exe...