Booking Ultra Pro Booking Ultra Pro
4 CVEs affecting Booking Ultra Pro Booking Ultra Pro. Latest disclosed: 2024-12-13. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-32960 | High | 8.8 | 2024-05-17 | Improper Privilege Management vulnerability in Booking Ultra Pro allows Privilege Escalation.This issue affects Booking Ultra Pro: from n/a through 1.1.12. |
CVE-2024-38717 | High | 7.1 | 2024-07-12 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Booking Ultra Pro allows PHP Local File Inclusion.This issue af… |
CVE-2024-38676 | Medium | 6.5 | 2024-07-20 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Booking Ultra Pro allows Stored XSS.This issue aff… |
CVE-2023-32601 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in Booking Ultra Pro Booking Ultra Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |