BC
Vendor
Booking Calendar Project
10
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-36384 | BC Booking Calendar Booking Calendar Project | 6.1 | Jul 18 | WordPress Booking Calendar Contact Form Plugin <= 1.2.40 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2022-1463 | BC Booking Calendar Booking Calendar Project | 8.8 | May 10 | Booking Calendar <= 9.1 - PHP Object Injection via Shortcode |
| CVE-2021-25040 | BC Booking Calendar Booking Calendar Project | 6.1 | Jan 3 | Booking Calendar < 8.9.2 - Reflected Cross-Site Scripting |
| CVE-2018-20556 | BC Booking Calendar Booking Calendar Project | 8.8 | Mar 18 | SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the booking_id parameter |
| CVE-2018-5673 | BC Booking Calendar Booking Calendar Project | 8.8 | Jan 13 | An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress |
| CVE-2018-5672 | BC Booking Calendar Booking Calendar Project | 4.8 | Jan 13 | An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress |
| CVE-2018-5671 | BC Booking Calendar Booking Calendar Project | 4.8 | Jan 13 | An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress |
| CVE-2018-5670 | BC Booking Calendar Booking Calendar Project | 4.8 | Jan 13 | An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress |
| CVE-2017-2151 | BC Booking Calendar Booking Calendar Project | 6.1 | Apr 28 | Cross-site scripting vulnerability in Booking Calendar version 7.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors |
| CVE-2017-2150 | BC Booking Calendar Booking Calendar Project | 5.3 | Apr 28 | Directory traversal vulnerability in Booking Calendar version 7.0 and earlier allows remote attackers to read arbitrary files via specially crafted captcha_chalange parameter |