Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-51300 State: PUBLISHED Published: 2025-02-19T00:00:00.000Z Last Updated: 2025-11-04T18:20:49.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Hotel Booking System v4.0 is vulnerable to Cross-Site Scripting (XSS) vulnerabilities in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key" parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/hotel-booking-system/#sectionDemo - https://packetstorm.news/files/id/176488
CVE ID: CVE-2023-51301 State: PUBLISHED Published: 2025-02-19T00:00:00.000Z Last Updated: 2025-11-04T18:20:51.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: A lack of rate limiting in the "Login Section, Forgot Email" feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/hotel-booking-system/#sectionDemo - https://packetstorm.news/files/id/176486
CVE ID: CVE-2023-51302 State: PUBLISHED Published: 2025-02-19T00:00:00.000Z Last Updated: 2025-02-20T15:00:24.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/hotel-booking-system/#sectionDemo - http://packetstormsecurity.com/files/176489/PHPJabbers-Hotel-Booking-System-4.0-CSV-Injection.html
CVE ID: CVE-2023-51303 State: PUBLISHED Published: 2025-02-19T00:00:00.000Z Last Updated: 2025-11-04T18:20:52.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple HTML Injection in the "lid, name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key, title" parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/event-ticketing-system/#sectionDemo - https://packetstorm.news/files/id/176516
CVE ID: CVE-2023-51305 State: PUBLISHED Published: 2025-02-19T00:00:00.000Z Last Updated: 2025-11-04T18:20:53.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Car Park Booking System v3.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key" parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/car-park-booking/#sectionDemo - https://packetstorm.news/files/id/176491
CVE ID: CVE-2023-51306 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-11-04T18:20:54.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "name, title" parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/event-ticketing-system/#sectionDemo - https://packetstorm.news/files/id/176516
CVE ID: CVE-2023-51308 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-11-04T18:20:55.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Car Park Booking System v3.0 is vulnerable to Multiple HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key, title" parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/car-park-booking/#sectionDemo - https://packetstorm.news/files/id/176491
CVE ID: CVE-2023-51309 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-11-04T18:20:57.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: A lack of rate limiting in the 'Email Settings' feature of PHPJabbers Car Park Booking System v3.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/car-park-booking/#sectionDemo - https://packetstorm.news/files/id/176492
CVE ID: CVE-2023-51310 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-11-04T18:20:58.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Car Park Booking System v3.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/car-park-booking/#sectionDemo - https://packetstorm.news/files/id/176492
CVE ID: CVE-2023-51311 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-11-04T18:20:59.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Car Park Booking System v3.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/car-park-booking/#sectionDemo - https://packetstorm.news/files/id/176494
CVE ID: CVE-2023-51312 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-11-04T18:21:00.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Restaurant Booking System v3.0 is vulnerable to Reflected Cross-Site Scripting (XSS) in Reservations menu, Schedule section date parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/restaurant-booking-system/#sectionDemo - https://packetstorm.news/files/id/176493
CVE ID: CVE-2023-51313 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-02-21T17:46:52.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Restaurant Booking System v3.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/restaurant-booking-system/#sectionDemo - http://packetstormsecurity.com/files/176498/PHPJabbers-Restaurant-Booking-System-3.0-CSV-Inj
oking-system/#sectionDemo - http://packetstormsecurity.com/files/176498/PHPJabbers-Restaurant-Booking-System-3.0-CSV-Injection.html
CVE ID: CVE-2023-51314 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-11-04T18:21:01.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Restaurant Booking System v3.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/restaurant-booking-system/#sectionDemo - https://packetstorm.news/files/id/176496
CVE ID: CVE-2023-51315 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-11-04T18:21:03.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Restaurant Booking System v3.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "seat_name, plugin_sms_api_key, plugin_sms_country_code, title, name" parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/restaurant-booking-system/#sectionDemo - https://packetstorm.news/files/id/176493
CVE ID: CVE-2023-51316 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-11-04T18:21:04.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Bus Reservation System v1.1 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/bus-reservation-system/#sectionDemo - https://packetstorm.news/files/id/176497
CVE ID: CVE-2023-51317 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-11-04T18:21:05.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Restaurant Booking System v3.0 is vulnerable to Multiple HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key, title" parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/restaurant-booking-system/#sectionDemo - https://packetstorm.news/files/id/176493
CVE ID: CVE-2023-51318 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-11-04T18:21:06.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Bus Reservation System v1.1 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "title, name" parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/bus-reservation-system/#sectionDemo - https://packetstorm.news/files/id/176499
CVE ID: CVE-2023-51319 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-11-04T18:21:07.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Bus Reservation System v1.1 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/bus-reservation-system/#sectionDemo - https://packetstorm.news/files/id/176500
CVE ID: CVE-2023-51320 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-11-04T18:21:09.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Night Club Booking Software v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/night-club-booking-software/#sectionDemo - https://packetstorm.news/files/id/176501
CVE ID: CVE-2023-51321 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-11-04T18:21:10.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Night Club Booking Software v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/night-club-booking-software/#sectionDemo - https://packetstorm.news/files/id/176502
CVE ID: CVE-2023-51323 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-11-04T18:21:11.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Shared Asset Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/shared-asset-booking-system/#sectionDemo - https://packetstorm.news/files/id/176503
CVE ID: CVE-2023-51324 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-11-04T18:21:12.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Shared Asset Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/shared-asset-booking-system/#sectionDemo - https://packetstorm.news/files/id/176504
CVE ID: CVE-2023-51325 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-11-04T18:21:14.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Shared Asset Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "title, name" parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/shared-asset-booking-system/#sectionDemo - https://packetstorm.news/files/id/176505
CVE ID: CVE-2023-51326 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-11-04T18:21:15.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/cleaning-business-software/#sectionDemo - https://packetstorm.news/files/id/176506
CVE ID: CVE-2023-51327 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-11-04T18:21:16.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/cleaning-business-software/#sectionDemo - https://packetstorm.news/files/id/176506
CVE ID: CVE-2023-51328 State: PUBLISHED Published: 2025-05-08T00:00:00.000Z Last Updated: 2025-11-04T18:21:17.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Cleaning Business Software v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "c_name, name" parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/cleaning-business-software/#sectionDemo - https://packetstorm.news/files/id/176507
CVE ID: CVE-2023-51330 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-11-04T18:21:19.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Cinema Booking System v1.0 is vulnerable to Reflected Cross-Site Scripting (XSS) in Now Showing menu "date" parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/cinema-booking-system/#sectionDemo - https://packetstorm.news/files/id/176508
CVE ID: CVE-2023-51331 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-11-04T18:21:20.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Cleaning Business Software v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/cleaning-business-software/#sectionDemo - https://packetstorm.news/files/id/176509
CVE ID: CVE-2023-51332 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-11-04T18:21:21.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Meeting Room Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/meeting-room-booking-system/#sectionDemo - https://packetstorm.news/files/id/176510
CVE ID: CVE-2023-51333 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-11-04T18:21:22.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Cinema Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/cinema-booking-system/#sectionDemo - https://packetstorm.news/files/id/176511
CVE ID: CVE-2023-51334 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-11-04T18:21:23.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cinema Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/cinema-booking-system/#sectionDemo - https://packetstorm.news/files/id/176512
CVE ID: CVE-2023-51335 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-11-04T18:21:25.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Cinema Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "title, name" parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/cinema-booking-system/#sectionDemo - https://packetstorm.news/files/id/176508
CVE ID: CVE-2023-51336 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-11-04T18:21:26.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Meeting Room Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/meeting-room-booking-system/#sectionDemo - https://packetstorm.news/files/id/176518
CVE ID: CVE-2023-51337 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-11-04T18:21:27.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Event Ticketing System v1.0 is vulnerable to Reflected Cross-Site Scripting (XSS) in "lid" parameter in index. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/event-ticketing-system/#sectionDemo - https://packetstorm.news/files/id/176516
CVE ID: CVE-2023-51338 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-11-04T18:21:28.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Meeting Room Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "title, name" parameters of&nbsp;index.php&nbsp;page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/meeting-room-booking-system/#sectionDemo - https://packetstorm.news/files/id/176517
CVE ID: CVE-2023-51339 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-11-04T18:21:29.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Event Ticketing System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/event-ticketing-system/#sectionDemo - https://packetstorm.news/files/id/176519
CVE ID: CVE-2023-51350 State: PUBLISHED Published: 2024-01-11T00:00:00.000Z Last Updated: 2025-06-16T19:08:32.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: A spoofing attack in ujcms v.8.0.2 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted script to the X-Forwarded-For function in the header. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ujcms.com/ - https://github.com/ujcms/ujcms - https://github.com/ujcms/ujcms/issues/7
CVE ID: CVE-2023-51353 State: PUBLISHED Published: 2024-12-09T11:29:51.014Z Last Updated: 2024-12-09T15:08:01.213Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: supsystic.com Products: Popup by Supsystic Problem Types: CWE-862 Description: Missing Authorization vulnerability in supsystic.com Popup by Supsystic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup by Supsystic: from n/a through 1.10.19. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/popup-by-supsystic/vulnerability/wordpress-popup-by-supsystic-plugin-1-10-19-broken-access-control-vu
e/wordpress/plugin/popup-by-supsystic/vulnerability/wordpress-popup-by-supsystic-plugin-1-10-19-broken-access-control-vulnerability-2?_s_id=cve
CVE ID: CVE-2023-51354 State: PUBLISHED Published: 2023-12-29T12:23:41.071Z Last Updated: 2024-08-02T22:32:09.158Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: WebbaPlugins Products: Appointment & Event Booking Calendar Plugin – Webba Booking Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WebbaPlugins Appointment & Event Booking Calendar Plugin – Webba Booking.This issue affects Appointment & Event Booking Calendar Plugin – Webba Booking: from n/a through 4.5.33. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/webba-booking-lite/wordpress-webba-booking-p
gram Container: References: - https://patchstack.com/database/vulnerability/webba-booking-lite/wordpress-webba-booking-plugin-4-5-33-cross-site-request-forgery-csrf-vulnerability?_s_id=cve