Availability Booking Calendar 5.0 is vulnerable to Multiple HTML Injection issues via SMS API Key or Default Country Code.
References
Link | Resource |
---|---|
http://packetstormsecurity.com/files/176033 | Exploit Third Party Advisory VDB Entry |
Configurations
History
09 Dec 2023, 04:47
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:phpjabbers:availability_booking_calendar:5.0:*:*:*:*:*:*:* | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
References | () http://packetstormsecurity.com/files/176033 - Exploit, Third Party Advisory, VDB Entry | |
CWE | CWE-79 |
07 Dec 2023, 07:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-12-07 07:15
Updated : 2024-02-05 00:22
NVD link : CVE-2023-48825
Mitre link : CVE-2023-48825
CVE.ORG link : CVE-2023-48825
JSON object : View
Products Affected
phpjabbers
- availability_booking_calendar
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')