Medium
CVE-2016-20070
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 11
Reset filters
High
CVE-2016-20084
Booking Calendar Contact Form <= 1.1.24 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-6810
Booking Calendar Contact Form <= 1.2.63 - Authenticated (Subscriber+) Insecure Direct Object Reference to Calendar Takeover
Medium
CVE-2025-13318
Booking Calendar Contact Form <= 1.2.60 - Missing Authorization to Unauthenticated Arbitrary Booking Confirmation via 'dex_bccf_ipn' Parameter
Medium
CVE-2025-48231
Booking Calendar Contact Form <= 1.2.58 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2025-24723
Booking Calendar Contact Form <= 1.2.55 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-36384
Booking Calendar Contact Form <= 1.2.40 - Reflected Cross-Site Scripting
Medium
CVE-2023-25037
Booking Calendar Contact Form <= 1.2.34 - Cross-Site Request Forgery via cpdexbccf_feedback
High
CVE-2016-20068
Booking Calendar Contact Form <= 1.0.23 - Shortcode SQL Injection
Critical
CVE-2016-10909
Booking Calendar Contact Form < 1.0.24 - Blind SQL Injection
Medium
CVE-2016-10908
Booking Calendar Contact Form <= 1.0.23 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.