CVE-2023-51313

PHPJabbers Restaurant Booking System v3.0 is affected by a CSV Injection vulnerability. The issue stems from insufficient input validation in the Languages section Labels any parameters field in System Options, which is used to construct CSV files (as described in public advisories and exploit de...

CVE-2023-51317

PHPJabbers Restaurant Booking System v3.0 is affected by multiple HTML injection vulnerabilities in the parameters name, plugin_sms_api_key, plugin_sms_country_code, and title. The CVE entry notes a CVSS v3.1 base score of 6.5 (Network, Low complexity, No privileges, User interaction not required...

CVE-2023-51314

CVE-2023-51314 affects PHPJabbers Restaurant Booking System v3.0. The lack of rate limiting in the Forgot Password and Email Settings features allows an attacker to induce a high volume of outgoing emails for a legitimate user, potentially causing Denial of Service. The provided connected sources...

CVE-2023-51315

Summary: CVE-2023-51315 affects PHPJabbers Restaurant Booking System v3.0. The vulnerability is described as multiple stored cross-site scripting (XSS) in the parameters: seat_name, plugin_sms_api_key, plugin_sms_country_code, title, and name. The connected sources confirm the product and the aff...

CVE-2023-51312

CVE-2023-51312 affects PHPJabbers Restaurant Booking System v3.0, with a reflected Cross-Site Scripting (XSS) flaw in the Reservations menu and the Schedule date parameter. The underlying issue is untrusted input reflected in HTML/JavaScript contexts, enabling arbitrary script execution. Public e...