Vulnerabilities > Phpjabbers > Shuttle Booking Software > 2.0

DATE	CVE	VULNERABILITY TITLE	RISK
2023-12-07	CVE-2023-48830	Injection vulnerability in PHPjabbers Shuttle Booking Software 2.0 Shuttle Booking Software 2.0 is vulnerable to CSV Injection in the Languages section via an export. network low complexity phpjabbers CWE-74	8.8
2023-12-07	CVE-2023-48172	Cross-site Scripting vulnerability in PHPjabbers Shuttle Booking Software 2.0 A Cross Site Scripting (XSS) vulnerability in Shuttle Booking Software 2.0 allows a remote attacker to inject JavaScript via the name, description, title, or address parameter to index.php. network low complexity phpjabbers CWE-79	5.4

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.