Vendor/product archive

phpjabbers / event_ticketing_system CVEs

Beta · best-effort

4 CVEs tagged to phpjabbers / event_ticketing_system — 0 Critical, 0 High, 4 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to phpjabbers vendor archive

CVE-2023-51339

Published Feb 20, 2025

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Event Ticketing System v1.0 allows attackers to send an excessive amount of email for a legitimate user, lea…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2023-51337

Published Feb 20, 2025

PHPJabbers Event Ticketing System v1.0 is vulnerable to Reflected Cross-Site Scripting (XSS) in "lid" parameter in index.

CVSS 5.4 · Medium

Vendor/product tagsBeta · best-effort

CVE-2023-51306

Published Feb 20, 2025

PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "name, title" parameters.

CVSS 5.4 · Medium

Vendor/product tagsBeta · best-effort

CVE-2023-51303

Published Feb 19, 2025

PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple HTML Injection in the "lid, name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key, title" p…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1