Show filters
3,812 Total Results
Displaying 291-300 of 3,812
Sort by:
Attacker Value
Unknown

CVE-2023-48838

Disclosure Date: December 07, 2023 (last updated February 25, 2025)
Appointment Scheduler 3.0 is vulnerable to Multiple HTML Injection issues via the SMS API Key or Default Country Code.
Attacker Value
Unknown

CVE-2023-48837

Disclosure Date: December 07, 2023 (last updated February 25, 2025)
Car Rental Script 3.0 is vulnerable to Multiple HTML Injection issues via SMS API Key or Default Country Code.
Attacker Value
Unknown

CVE-2023-48836

Disclosure Date: December 07, 2023 (last updated February 25, 2025)
Car Rental Script 3.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via the name, plugin_sms_api_key, plugin_sms_country_code, calendar_id, title, country name, or customer_name parameter.
Attacker Value
Unknown

CVE-2023-48835

Disclosure Date: December 07, 2023 (last updated February 25, 2025)
Car Rental Script v3.0 is vulnerable to CSV Injection via a Language > Labels > Export action.
Attacker Value
Unknown

CVE-2023-48834

Disclosure Date: December 07, 2023 (last updated February 25, 2025)
A lack of rate limiting in pjActionAjaxSend in Car Rental v3.0 allows attackers to cause resource exhaustion.
Attacker Value
Unknown

CVE-2023-48833

Disclosure Date: December 07, 2023 (last updated February 25, 2025)
A lack of rate limiting in pjActionAJaxSend in Time Slots Booking Calendar 4.0 allows attackers to cause resource exhaustion.
Attacker Value
Unknown

CVE-2023-48831

Disclosure Date: December 07, 2023 (last updated February 25, 2025)
A lack of rate limiting in pjActionAJaxSend in Availability Booking Calendar 5.0 allows attackers to cause resource exhaustion.
Attacker Value
Unknown

CVE-2023-48830

Disclosure Date: December 07, 2023 (last updated February 25, 2025)
Shuttle Booking Software 2.0 is vulnerable to CSV Injection in the Languages section via an export.
Attacker Value
Unknown

CVE-2023-48828

Disclosure Date: December 07, 2023 (last updated February 25, 2025)
Time Slots Booking Calendar 4.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via the name, plugin_sms_api_key, plugin_sms_country_code, calendar_id, title, country name, or customer_name parameter.
Attacker Value
Unknown

CVE-2023-48827

Disclosure Date: December 07, 2023 (last updated February 25, 2025)
Time Slots Booking Calendar 4.0 is vulnerable to Multiple HTML Injection issues via the name, plugin_sms_api_key, plugin_sms_country_code, calendar_id, title, country name, or customer_name parameter.