Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: bookingalgorithms Component: Ba Book Everything Clear all filters
TI-2024-31678 CVE-2024-47360 · GHSA-p9c9-5mh2-439p

WordPress BA Book Everything plugin <= 1.6.20 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bookingalgorithms BA Book Everything ba-book-everything.This issue affects BA Book Everything: from n/a through <= 1.6…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00308 Published 2024-10-06 No fix listed CWE-79
TI-2024-21463 CVE-2024-32576 · GHSA-v43f-6mhr-gwc4

WordPress BA Book Everything plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Booking Algorithms BA Book Everything allows Stored XSS.This issue affects BA Book Everything: from n/a through 1.6.8.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00289 Published 2024-04-18 No fix listed CWE-79
TI-2024-21485 CVE-2024-32598 · GHSA-ffg5-77xm-p7h2

WordPress BA Book Everything plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Booking Algorithms BA Book Everything allows Stored XSS.This issue affects BA Book Everything: from n/a through 1.6.8.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00325 Published 2024-04-18 No fix listed CWE-79
TI-2024-03426 CVE-2024-3672 · GHSA-8p8h-55m5-85pr

BA Book Everything <= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Priority LOW 28

The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'all-items' shortcode in all versions up to, and including, 1.6.8 due to insufficient input sanitization and outpu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0032 Published 2024-04-16 No fix listed CWE-79
TI-2024-21200 CVE-2024-32125 · GHSA-4r7g-8pjm-hmjc

WordPress BA Book Everything plugin <= 1.6.4 - Auth. SQL Injection vulnerability

Priority LOW 39

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Booking Algorithms BA Book Everything.This issue affects BA Book Everything: from n/a through 1.6.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00577 Published 2024-04-15 No fix listed CWE-89