Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Bookgy records in CISA KEVNo Bookgy vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 48
SQL injection vulnerability in Bookgy.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00413 · Published 2025-04-29 · No fix listed CWE-89
Priority MEDIUM 48
SQL injection vulnerability in Bookgy.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00413 · Published 2025-04-29 · No fix listed CWE-89
Priority MEDIUM 46
Bookgy does not provide for proper authorisation control in multiple areas of the application.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00413 · Published 2025-04-29 · No fix listed CWE-863
Priority LOW 23
Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy.
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00242 · Published 2025-04-29 · No fix listed CWE-79
Priority LOW 23
Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy.
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00242 · Published 2025-04-29 · No fix listed CWE-79
Open these records in search →