Vulnerabilities

TI-2023-26648 CVE-2023-48833 · GHSA-rj8f-9p6v-299f

A lack of rate limiting in pjActionAJaxSend in Time Slots Booking Calendar 4.0 allows…

LOW 35

A lack of rate limiting in pjActionAJaxSend in Time Slots Booking Calendar 4.0 allows attackers to cause resource exhaustion.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01051 Published 2023-12-07 No fix listed CWE-400

TI-2023-26645 CVE-2023-48828 · GHSA-rvx6-x33g-wv28

Time Slots Booking Calendar 4.0 is vulnerable to Multiple Stored Cross-Site Scripting…

LOW 25

Time Slots Booking Calendar 4.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via the name, plugin_sms_api_key, plugin_sms_country_code, calendar_id, title, country name, or customer_name parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00465 Published 2023-12-07 No fix listed CWE-79

TI-2023-26644 CVE-2023-48827 · GHSA-5pvh-q7gw-3pmf

Time Slots Booking Calendar 4.0 is vulnerable to Multiple HTML Injection issues via the…

LOW 25

Time Slots Booking Calendar 4.0 is vulnerable to Multiple HTML Injection issues via the name, plugin_sms_api_key, plugin_sms_country_code, calendar_id, title, country name, or customer_name parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00465 Published 2023-12-07 No fix listed CWE-79

TI-2023-26643 CVE-2023-48826 · GHSA-vvq6-g3fh-pj8q

Time Slots Booking Calendar 4.0 is vulnerable to CSV Injection via the unique ID field of the Reservations List.

MEDIUM 40

Time Slots Booking Calendar 4.0 is vulnerable to CSV Injection via the unique ID field of the Reservations List.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01201 Published 2023-12-07 No fix listed CWE-74

TI-2023-16586 CVE-2023-33564 · GHSA-gm67-v86v-m657

There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of…

MEDIUM 60

There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Time Slots Booking Calendar v3.3.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00497 Published 2023-08-01 No fix listed CWE-79

TI-2023-16585 CVE-2023-33563 · GHSA-8h3v-w8vm-79rh

In PHP Jabbers Time Slots Booking Calendar 3.3 , lack of verification when changing an…

HIGH 73

In PHP Jabbers Time Slots Booking Calendar 3.3 , lack of verification when changing an email address and/or password (on the Profile Page) allows remote attackers to take over accounts.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00756 Published 2023-08-01 No fix listed CWE-287

TI-2023-16584 CVE-2023-33562 · GHSA-3xw6-mxf4-w278

User enumeration is found in in PHP Jabbers Time Slots Booking Calendar v3.3.

HIGH 82

User enumeration is found in in PHP Jabbers Time Slots Booking Calendar v3.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00765 Published 2023-08-01 No fix listed

TI-2023-16583 CVE-2023-33561 · GHSA-x3xp-qp6c-rgqp

Improper input validation of password parameter in PHP Jabbers Time Slots Booking…

HIGH 82

Improper input validation of password parameter in PHP Jabbers Time Slots Booking Calendar v 3.3 results in insecure passwords.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00986 Published 2023-08-01 No fix listed

TI-2023-16582 CVE-2023-33560 · GHSA-8x5g-gv52-3m86

There is a Cross Site Scripting (XSS) vulnerability in "cid" parameter of preview.php in…

MEDIUM 60

There is a Cross Site Scripting (XSS) vulnerability in "cid" parameter of preview.php in PHPJabbers Time Slots Booking Calendar v3.3.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00497 Published 2023-08-01 No fix listed CWE-79

Vulnerabilities

Filters