CVE-2023-51295
Published May 8, 2025PHPJabbers Event Booking Calendar v4.0 is vulnerable to Multiple HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key, title" parame…
Vendor/product archive
phpjabbers / event_booking_calendar CVEs
Beta · best-effort7 CVEs tagged to phpjabbers / event_booking_calendar — 1 Critical, 2 High, 4 Medium, 0 Low, 0 Unrated.
CVE-2023-51298
Published Feb 19, 2025PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient i…
CVE-2023-51296
Published Feb 19, 2025PHPJabbers Event Booking Calendar v4.0 is vulnerable to Cross-Site Scripting (XSS) in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key" parameters…
CVE-2023-51293
Published Feb 19, 2025A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Event Booking Calendar v4.0 allows attackers to send an excessive amount of email for a le…
CVE-2023-40765
Published Aug 28, 2023User enumeration is found in PHPJabbers Event Booking Calendar v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determin…
CVE-2014-10015
Published Jan 13, 2015SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter.
CVE-2014-10014
Published Jan 13, 2015Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Event Booking Calendar 2.0 allow remote attackers to hijack the authentication of administrators for reque…
Showing 1-7 of 7 CVEsPage 1 of 1