Vulnerabilities > Phpjabbers > Availability Booking Calendar > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-12-07 CVE-2023-48208 Cross-site Scripting vulnerability in PHPjabbers Availability Booking Calendar 5.0
A Cross Site Scripting vulnerability in Availability Booking Calendar 5.0 allows an attacker to inject JavaScript via the name, plugin_sms_api_key, plugin_sms_country_code, uuid, title, or country name parameter to index.php.
network
low complexity
phpjabbers CWE-79
6.1
2023-12-07 CVE-2023-48825 Cross-site Scripting vulnerability in PHPjabbers Availability Booking Calendar 5.0
Availability Booking Calendar 5.0 is vulnerable to Multiple HTML Injection issues via SMS API Key or Default Country Code.
network
low complexity
phpjabbers CWE-79
5.4
2023-08-03 CVE-2023-4110 Cross-site Scripting vulnerability in PHPjabbers Availability Booking Calendar 5.0
A vulnerability has been found in PHP Jabbers Availability Booking Calendar 5.0 and classified as problematic.
network
low complexity
phpjabbers CWE-79
6.1