← Back

Availability Booking Calendar

availability_booking_calendar

Vendor: Phpjabbers • 8 CVEs

CVEs (8)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-48831
1Phpjabbers
1Availability Booking Calendar
Jun 17, 2026
Dec 7, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
A lack of rate limiting in pjActionAJaxSend in Availability Booking Calendar 5.0 allows attackers to cause resource exhaustion.
CVE-2023-48825
1Phpjabbers
1Availability Booking Calendar
Jun 17, 2026
Dec 7, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Availability Booking Calendar 5.0 is vulnerable to Multiple HTML Injection issues via SMS API Key or Default Country Code.
CVE-2023-48208
1Phpjabbers
1Availability Booking Calendar
Jun 17, 2026
Dec 7, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
A Cross Site Scripting vulnerability in Availability Booking Calendar 5.0 allows an attacker to inject JavaScript via the name, plugin_sms_api_key, plugin_sms_country_code, uuid, title, or country name parameter to index...Show more
A Cross Site Scripting vulnerability in Availability Booking Calendar 5.0 allows an attacker to inject JavaScript via the name, plugin_sms_api_key, plugin_sms_country_code, uuid, title, or country name parameter to index.php.Show less
CVE-2023-48207
1Phpjabbers
1Availability Booking Calendar
Jun 17, 2026
Dec 7, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Availability Booking Calendar 5.0 allows CSV injection via the unique ID field in the Reservations list component.
CVE-2023-36133
1Phpjabbers
1Availability Booking Calendar
Jun 17, 2026
Aug 4, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
PHPJabbers Availability Booking Calendar 5.0 is vulnerable to User Account Takeover through username/password change.
CVE-2023-36132
1Phpjabbers
1Availability Booking Calendar
Jun 17, 2026
Aug 4, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
PHP Jabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control.
CVE-2023-36131
1Phpjabbers
1Availability Booking Calendar
Jun 17, 2026
Aug 4, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
PHPJabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control due to improper input validation of password parameter.
CVE-2023-4110
1Phpjabbers
1Availability Booking Calendar
Jun 17, 2026
Aug 3, 2023
N/A· v4
6.1 MEDIUM· v3
4.0 MEDIUM· v2
A vulnerability has been found in PHP Jabbers Availability Booking Calendar 5.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the ar...Show more
A vulnerability has been found in PHP Jabbers Availability Booking Calendar 5.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument session_id leads to cross site scripting. The attack can be launched remotely. The identifier VDB-235957 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.Show less