Read the docs

Bookgy

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Bookgy records in CISA KEV

No Bookgy vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

5 records

TI-2025-27089 CVE-2025-40618 · GHSA-phfx-9rhx-m3x9

SQL injection in Bookgy

Priority MEDIUM 48

SQL injection vulnerability in Bookgy.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00413 Published 2025-04-29 No fix listed CWE-89
TI-2025-27088 CVE-2025-40617 · GHSA-v836-66v3-26j5

SQL injection in Bookgy

Priority MEDIUM 48

SQL injection vulnerability in Bookgy.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00413 Published 2025-04-29 No fix listed CWE-89
Priority MEDIUM 46

Bookgy does not provide for proper authorisation control in multiple areas of the application.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00413 Published 2025-04-29 No fix listed CWE-863
TI-2025-27087 CVE-2025-40616 · GHSA-c47v-4q6r-838w

Cross-site scripting in Bookgy

Priority LOW 23

Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00242 Published 2025-04-29 No fix listed CWE-79
TI-2025-27086 CVE-2025-40615 · GHSA-gxhp-4g3m-x7p8

Cross-site scripting in Bookgy

Priority LOW 23

Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00242 Published 2025-04-29 No fix listed CWE-79
Open these records in search →