Medium
CVE-2023-4251
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,329
Reset filters
Medium
CVE-2023-4250
EventPrime < 3.2.0 - Reflected Cross-Site Scripting via keyword and ep_filter_date
Medium
CVE-2023-45270
Pinpoint Booking System <= 2.9.9.4.0 - Cross-Site Request Forgery via initBackEndAJAX
Medium
CVE-2023-44987
Timely Booking Button <= 2.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-4691
Bookly <= 22.3.1 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-51520
Booking Calendar <= 9.7.3.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-44146
Checkfront Online Booking System <= 3.6 - Cross-Site Request Forgery
High
a02f4fc4-42ca-4f8e-9c28-bfa69644e7b6
Booking calendar, Appointment Booking System <= 3.2.8 - Multiple Authenticated(Editor+) SQL Injection
Medium
CVE-2023-4620
Booking Calendar <= 9.7.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-2705
gAppointments - Appointment booking addon for Gravity Forms <= 1.9.7 - Reflected Cross-Site Scripting
Medium
CVE-2023-39992
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-39918
Booking Package <= 1.6.01 - Reflected Cross-Site Scripting via 'mode'
Medium
CVE-2023-4067
Bus Ticket Booking with Seat Reservation <= 5.2.3 - Reflected Cross-Site Scripting
Medium
CVE-2023-38520
Pinpoint Booking System <= 2.9.9.3.4 - Content Spoofing
Medium
CVE-2023-38384
eaSYNC <= 1.3.11 - Reflected Cross-Site Scripting
Medium
CVE-2023-33999
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
Medium
CVE-2023-36507
BookingPress <= 1.0.64 - Unauthenticated Sensitive Information Exposure
Critical
CVE-2023-37389
Booking Package <= 1.5.98 - Authorization Bypass to Arbitrary Password Reset
Medium
CVE-2023-3427
Salon Booking System <= 8.4.6 - Cross-Site Request Forgery to Admin Role Change to Customer, User Meta Update via save_customer
Medium
CVE-2022-36399
Booked < 2.4.4 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2023-34017
Five Star Restaurant Reservations <= 2.6.7 - Reflected Cross-Site Scripting
Medium
CVE-2023-36510
ReDi Restaurant Reservation <= 23.0211 - Missing Authorization
Medium
CVE-2023-36384
Booking Calendar Contact Form <= 1.2.40 - Reflected Cross-Site Scripting
Critical
CVE-2023-2834
BookIt <= 2.3.7 - Authentication Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.