VendorsBooking Calendar Projectbooking_calendarany version
Vulnerabilities

Booking Calendar Project Booking Calendar any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2022-1463
Booking Calendar <= 9.1 - PHP Object Injection via Shortcode
Published 2022-05-10 · Modified
8.8EPSS 0.017
CVE-2023-36384
WordPress Booking Calendar Contact Form Plugin <= 1.2.40 is vulnerable to Cross Site Scripting (XSS)
Published 2023-07-18 · Modified
7.1EPSS 0.004
CVE-2017-2151
Cross-site scripting vulnerability in Booking Calendar version 7.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published 2017-04-28 · Modified
6.1EPSS 0.009
CVE-2021-25040
Booking Calendar < 8.9.2 - Reflected Cross-Site Scripting
Published 2022-01-03 · Modified
6.1EPSS 0.008
CVE-2017-2150
Directory traversal vulnerability in Booking Calendar version 7.0 and earlier allows remote attackers to read arbitrary files via specially crafted captcha_chalange parameter.
Published 2017-04-28 · Modified
5.3EPSS 0.024