Vulnerabilities

TI-2024-09100 CVE-2024-9807 · GHSA-j457-97cq-4x7p

Craig Rodway Classroombookings Session Page sessions cross site scripting

LOW 24

A vulnerability was found in Craig Rodway Classroombookings 2.8.7 and classified as problematic.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00466 Published 2024-10-10 No fix listed CWE-79

TI-2024-09099 CVE-2024-9806 · GHSA-m39v-rgw3-qmpc

Craig Rodway Classroombookings Room Page fields cross site scripting

MEDIUM 57

A vulnerability has been found in Craig Rodway Classroombookings up to 2.8.6 and classified as problematic.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00457 Published 2024-10-10 No fix listed CWE-79

TI-2023-09117 CVE-2023-23012 · GHSA-v3wm-hvwx-j6vw

Cross Site Scripting (XSS) vulnerability in craigrodway classroombookings 2.6.4 allows…

MEDIUM 60

Cross Site Scripting (XSS) vulnerability in craigrodway classroombookings 2.6.4 allows attackers to execute arbitrary code or other unspecified impacts via the input bgcol in file Weeks.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00484 Published 2023-01-20 No fix listed CWE-79

TI-2020-17963 CVE-2020-35382 · GHSA-63vh-chmr-pr22

SQL Injection in Classbooking before 2.4.1 via the username field of a CSV file when adding a new user.

LOW 34

SQL Injection in Classbooking before 2.4.1 via the username field of a CSV file when adding a new user.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0104 Published 2020-12-14 No fix listed CWE-89

Vulnerabilities

Filters

Craig Rodway Classroombookings Session Page sessions cross site scripting

Craig Rodway Classroombookings Room Page fields cross site scripting

Cross Site Scripting (XSS) vulnerability in craigrodway classroombookings 2.6.4 allows…

SQL Injection in Classbooking before 2.4.1 via the username field of a CSV file when adding a new user.