Vulnerabilities > Phpjabbers > Time Slots Booking Calendar > High

DATE CVE VULNERABILITY TITLE RISK
2023-12-07 CVE-2023-48826 Injection vulnerability in PHPjabbers Time Slots Booking Calendar 4.0
Time Slots Booking Calendar 4.0 is vulnerable to CSV Injection via the unique ID field of the Reservations List.
network
low complexity
phpjabbers CWE-74
8.8
2023-12-07 CVE-2023-48833 Resource Exhaustion vulnerability in PHPjabbers Time Slots Booking Calendar 4.0
A lack of rate limiting in pjActionAJaxSend in Time Slots Booking Calendar 4.0 allows attackers to cause resource exhaustion.
network
low complexity
phpjabbers CWE-400
7.5
2023-08-01 CVE-2023-33563 Improper Authentication vulnerability in PHPjabbers Time Slots Booking Calendar 3.3
In PHP Jabbers Time Slots Booking Calendar 3.3 , lack of verification when changing an email address and/or password (on the Profile Page) allows remote attackers to take over accounts.
network
low complexity
phpjabbers CWE-287
8.8