CVE-2023-48831
Published Dec 7, 2023A lack of rate limiting in pjActionAJaxSend in Availability Booking Calendar 5.0 allows attackers to cause resource exhaustion.
Vendor/product archive
phpjabbers / availability_booking_calendar CVEs
Beta · best-effort8 CVEs tagged to phpjabbers / availability_booking_calendar — 3 Critical, 2 High, 2 Medium, 1 Low, 0 Unrated.
CVE-2023-48825
Published Dec 7, 2023Availability Booking Calendar 5.0 is vulnerable to Multiple HTML Injection issues via SMS API Key or Default Country Code.
CVE-2023-48208
Published Dec 7, 2023A Cross Site Scripting vulnerability in Availability Booking Calendar 5.0 allows an attacker to inject JavaScript via the name, plugin_sms_api_key, plugin_sms_country_code, uuid,…
CVE-2023-48207
Published Dec 7, 2023Availability Booking Calendar 5.0 allows CSV injection via the unique ID field in the Reservations list component.
CVE-2023-36133
Published Aug 4, 2023PHPJabbers Availability Booking Calendar 5.0 is vulnerable to User Account Takeover through username/password change.
CVE-2023-36132
Published Aug 4, 2023PHP Jabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control.
CVE-2023-36131
Published Aug 4, 2023PHPJabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control due to improper input validation of password parameter.
CVE-2023-4110
Published Aug 3, 2023A vulnerability has been found in PHP Jabbers Availability Booking Calendar 5.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the fi…
Showing 1-8 of 8 CVEsPage 1 of 1