Bookingcore Booking Core
6 CVEs affecting Bookingcore Booking Core. Latest disclosed: 2021-10-04. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-37333 | Critical | 9.8 | 2021-10-04 | Laravel Booking System Booking Core 2.0 is vulnerable to Session Management. A password change at sandbox.bookingcore.org/user/profile/change-password does not… |
CVE-2020-25445 | High | 7.8 | 2021-07-14 | The “Subscribe” feature in Ultimate Booking System Booking Core 1.7.0 is vulnerable to CSV formula injection. The input containing the excel formula is not bei… |
CVE-2020-27379 | Medium | 6.5 | 2021-07-14 | Cross Site Request Forgery (CSRF) vulnerability in Booking Core - Ultimate Booking System Booking Core 1.7.0 . The CSRF token is not being validated when the r… |
CVE-2021-37330 | Medium | 5.4 | 2021-10-04 | Laravel Booking System Booking Core 2.0 is vulnerable to Cross Site Scripting (XSS). The Avatar upload in the My Profile section could be exploited to upload a… |
CVE-2020-25444 | Medium | 5.4 | 2021-07-14 | Cross Site Scripting (XSS) vulnerability in Booking Core - Ultimate Booking System Booking Core 1.7.0 via the (1) "About Yourself” section under the “My Profil… |
CVE-2021-37331 | Medium | 5.3 | 2021-10-04 | Laravel Booking System Booking Core 2.0 is vulnerable to Incorrect Access Control. On the Verifications page, after uploading an ID Card or Trade License and v… |