Twinkletoessoftware Booked
3 CVEs affecting Twinkletoessoftware Booked. Latest disclosed: 2023-01-22. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-9581 | High | 8.8 | 2019-03-06 | phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field, leading to execution of arbitrary Web/custom-favicon.php PHP code, bec… |
CVE-2022-30706 | Medium | 6.1 | 2022-07-26 | Open redirect vulnerability in Booked versions prior to 3.3 allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a… |
CVE-2023-24058 | Medium | 4.3 | 2023-01-22 | Booked Scheduler 2.5.5 allows authenticated users to create and schedule events for any other user via a modified userId value to reservation_save.php. NOTE: 2… |