Vulnerabilities > Bookingcore > Booking Core > 2.0

DATE CVE VULNERABILITY TITLE RISK
2021-10-04 CVE-2021-37330 Cross-site Scripting vulnerability in Bookingcore Booking Core 2.0
Laravel Booking System Booking Core 2.0 is vulnerable to Cross Site Scripting (XSS).
3.5
2021-10-04 CVE-2021-37331 Authorization Bypass Through User-Controlled Key vulnerability in Bookingcore Booking Core 2.0
Laravel Booking System Booking Core 2.0 is vulnerable to Incorrect Access Control.
network
low complexity
bookingcore CWE-639
5.0
2021-10-04 CVE-2021-37333 Insufficient Session Expiration vulnerability in Bookingcore Booking Core 2.0
Laravel Booking System Booking Core 2.0 is vulnerable to Session Management.
network
low complexity
bookingcore CWE-613
7.5