Twinkle Toes Software

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Twinkle Toes Software records in CISA KEV

No Twinkle Toes Software vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Booked 3 records MEDIUM

Records

3 records in Booked · all components

TI-2023-09836 CVE-2023-24058 · GHSA-cfwr-wq2f-j365

Booked Scheduler 2.5.5 allows authenticated users to create and schedule events for any…

MEDIUM 53

Booked Scheduler 2.5.5 allows authenticated users to create and schedule events for any other user via a modified userId value to reservation_save.php.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01022 Published 2023-01-22 No fix listed CWE-284

TI-2019-07000 CVE-2019-9581 · GHSA-qqxj-h4qq-r77g

phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field…

MEDIUM 53

phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field, leading to execution of arbitrary Web/custom-favicon.php PHP code, because Presenters/Admin/ManageThemePresenter.php does not ensur…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.1349 Published 2019-03-06 No fix listed CWE-434

TI-2022-12842 CVE-2022-30706 · GHSA-3jxm-cp2c-65rc

Open redirect in Twinkle Toes Software Booked

LOW 28

Open redirect vulnerability in Booked versions prior to 3.3 allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafte…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00644 Published 2022-07-26 Fixed in 3.3 CWE-601

Open these records in search →

Critical	0
High	1
Medium	3
Low	0
No CVSS	0