TI-2023-16584 CVE-2023-33562 · GHSA-3xw6-mxf4-w278
User enumeration is found in in PHP Jabbers Time Slots Booking Calendar v3.3.
Priority HIGH 82
User enumeration is found in in PHP Jabbers Time Slots Booking Calendar v3.3.
PHPJabbers
Records140All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical30CVSS 9.0–10.0
CVSS high29CVSS 7.0–8.9
Exploited now
PHPJabbers records in CISA KEVNo PHPJabbers vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
9 records in Time Slots Booking Calendar · all components
TI-2023-16583 CVE-2023-33561 · GHSA-x3xp-qp6c-rgqp
Improper input validation of password parameter in PHP Jabbers Time Slots Booking…
Priority HIGH 82
Improper input validation of password parameter in PHP Jabbers Time Slots Booking Calendar v 3.3 results in insecure passwords.
TI-2023-16585 CVE-2023-33563 · GHSA-8h3v-w8vm-79rh
In PHP Jabbers Time Slots Booking Calendar 3.3 , lack of verification when changing an…
Priority HIGH 73
In PHP Jabbers Time Slots Booking Calendar 3.3 , lack of verification when changing an email address and/or password (on the Profile Page) allows remote attackers to take over accounts.
TI-2023-16586 CVE-2023-33564 · GHSA-gm67-v86v-m657
There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of…
Priority MEDIUM 60
There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Time Slots Booking Calendar v3.3.
TI-2023-16582 CVE-2023-33560 · GHSA-8x5g-gv52-3m86
There is a Cross Site Scripting (XSS) vulnerability in "cid" parameter of preview.php in…
Priority MEDIUM 60
There is a Cross Site Scripting (XSS) vulnerability in "cid" parameter of preview.php in PHPJabbers Time Slots Booking Calendar v3.3.
TI-2023-26643 CVE-2023-48826 · GHSA-vvq6-g3fh-pj8q
Time Slots Booking Calendar 4.0 is vulnerable to CSV Injection via the unique ID field of the Reservations List.
Priority MEDIUM 40
Time Slots Booking Calendar 4.0 is vulnerable to CSV Injection via the unique ID field of the Reservations List.
TI-2023-26648 CVE-2023-48833 · GHSA-rj8f-9p6v-299f
A lack of rate limiting in pjActionAJaxSend in Time Slots Booking Calendar 4.0 allows…
Priority LOW 35
A lack of rate limiting in pjActionAJaxSend in Time Slots Booking Calendar 4.0 allows attackers to cause resource exhaustion.
TI-2023-26645 CVE-2023-48828 · GHSA-rvx6-x33g-wv28
Time Slots Booking Calendar 4.0 is vulnerable to Multiple Stored Cross-Site Scripting…
Priority LOW 25
Time Slots Booking Calendar 4.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via the name, plugin_sms_api_key, plugin_sms_country_code, calendar_id, title, country name, or customer_name parameter.
TI-2023-26644 CVE-2023-48827 · GHSA-5pvh-q7gw-3pmf
Time Slots Booking Calendar 4.0 is vulnerable to Multiple HTML Injection issues via the…
Priority LOW 25
Time Slots Booking Calendar 4.0 is vulnerable to Multiple HTML Injection issues via the name, plugin_sms_api_key, plugin_sms_country_code, calendar_id, title, country name, or customer_name parameter.