Show filters
90 Total Results
Displaying 1-10 of 90
Sort by:
Attacker Value
Unknown

CVE-2023-48841

Disclosure Date: December 07, 2023 (last updated December 09, 2023)
Appointment Scheduler 3.0 is vulnerable to CSV Injection via a Language > Labels > Export action.
Attacker Value
Unknown

CVE-2023-48840

Disclosure Date: December 07, 2023 (last updated December 09, 2023)
A lack of rate limiting in pjActionAjaxSend in Appointment Scheduler 3.0 allows attackers to cause resource exhaustion.
Attacker Value
Unknown

CVE-2023-48839

Disclosure Date: December 07, 2023 (last updated December 09, 2023)
Appointment Scheduler 3.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via the name, plugin_sms_api_key, plugin_sms_country_code, calendar_id, title, country name, or customer_name parameter.
Attacker Value
Unknown

CVE-2023-48838

Disclosure Date: December 07, 2023 (last updated December 09, 2023)
Appointment Scheduler 3.0 is vulnerable to Multiple HTML Injection issues via the SMS API Key or Default Country Code.
Attacker Value
Unknown

CVE-2023-48837

Disclosure Date: December 07, 2023 (last updated December 09, 2023)
Car Rental Script 3.0 is vulnerable to Multiple HTML Injection issues via SMS API Key or Default Country Code.
Attacker Value
Unknown

CVE-2023-48836

Disclosure Date: December 07, 2023 (last updated December 09, 2023)
Car Rental Script 3.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via the name, plugin_sms_api_key, plugin_sms_country_code, calendar_id, title, country name, or customer_name parameter.
Attacker Value
Unknown

CVE-2023-48835

Disclosure Date: December 07, 2023 (last updated December 09, 2023)
Car Rental Script v3.0 is vulnerable to CSV Injection via a Language > Labels > Export action.
Attacker Value
Unknown

CVE-2023-48834

Disclosure Date: December 07, 2023 (last updated December 09, 2023)
A lack of rate limiting in pjActionAjaxSend in Car Rental v3.0 allows attackers to cause resource exhaustion.
Attacker Value
Unknown

CVE-2023-48833

Disclosure Date: December 07, 2023 (last updated December 09, 2023)
A lack of rate limiting in pjActionAJaxSend in Time Slots Booking Calendar 4.0 allows attackers to cause resource exhaustion.
Attacker Value
Unknown

CVE-2023-48831

Disclosure Date: December 07, 2023 (last updated December 09, 2023)
A lack of rate limiting in pjActionAJaxSend in Availability Booking Calendar 5.0 allows attackers to cause resource exhaustion.