Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Bookgy Clear all filters
TI-2025-27090 CVE-2025-40619 · GHSA-3255-g96h-946g

Improper access control vulnerability in Bookgy

Priority MEDIUM 46

Bookgy does not provide for proper authorisation control in multiple areas of the application.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00413 Published 2025-04-29 No fix listed CWE-863
TI-2025-27089 CVE-2025-40618 · GHSA-phfx-9rhx-m3x9

SQL injection in Bookgy

Priority MEDIUM 48

SQL injection vulnerability in Bookgy.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00413 Published 2025-04-29 No fix listed CWE-89
TI-2025-27088 CVE-2025-40617 · GHSA-v836-66v3-26j5

SQL injection in Bookgy

Priority MEDIUM 48

SQL injection vulnerability in Bookgy.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00413 Published 2025-04-29 No fix listed CWE-89
TI-2025-27087 CVE-2025-40616 · GHSA-c47v-4q6r-838w

Cross-site scripting in Bookgy

Priority LOW 23

Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00242 Published 2025-04-29 No fix listed CWE-79
TI-2025-27086 CVE-2025-40615 · GHSA-gxhp-4g3m-x7p8

Cross-site scripting in Bookgy

Priority LOW 23

Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00242 Published 2025-04-29 No fix listed CWE-79