Medium
CVE-2024-9882
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 88
Reset filters
Medium
CVE-2024-8797
WP Booking System – Booking Calendar <= 2.0.19.8 - Reflected Cross-Site Scripting
High
CVE-2024-7112
Pinpoint Booking System <= 2.9.9.5.0- Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-43280
Salon booking system <= 10.8.1 - Unauthenticated Open Redirect
Critical
CVE-2024-39658
Salon booking system <= 10.7 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-3636
Pinpoint Booking System <= 2.9.9.4.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2024-3229
Salon Booking System <= 10.2 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-4468
Salon booking system <= 9.9 - Missing Authorization
Critical
CVE-2024-32692
Chauffeur Taxi Booking System for WordPress <= 6.9 - Authentication Bypass
Critical
CVE-2024-4442
Salon booking system <= 9.9 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2024-2429
Salon booking system <= 9.6.5 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-2439
Salon booking system <= 9.6.5 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-2603
Salon booking system <= 9.6.5 - Authenticated (Editor+) Stored Cross-Site Scripting via Email Settings
Critical
CVE-2024-31115
Chauffeur Taxi Booking System for WordPress <= 7.2 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-30510
Salon booking system <= 9.5 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-2101
Salon booking system <= 9.6.2 - Authenticated (Customer+) Stored Cross-Site Scripting
High
CVE-2024-2102
Salon booking system <= 9.6.2 - Unauthenticated Stored Cross-Site Scripting via 'sms_prefix'
Medium
CVE-2023-49758
WP Booking System <= 2.0.19.2 - Missing Authorization
High
CVE-2023-48319
Salon booking system < 8.7 - Authenticated (Editor+) Privilege Escalation
Medium
CVE-2023-45270
Pinpoint Booking System <= 2.9.9.4.0 - Cross-Site Request Forgery via initBackEndAJAX
Medium
CVE-2023-38520
Pinpoint Booking System <= 2.9.9.3.4 - Content Spoofing
Medium
CVE-2023-33999
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
Medium
CVE-2023-3427
Salon Booking System <= 8.4.6 - Cross-Site Request Forgery to Admin Role Change to Customer, User Meta Update via save_customer
Medium
CVE-2023-25062
Pinpoint Booking System <= 2.9.9.2.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.