Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qmvw-mmq3-8fjr

Опубликовано: 19 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

PHPJabbers Event Booking Calendar v4.0 is vulnerable to Cross-Site Scripting (XSS) in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key" parameters which allows attackers to execute arbitrary code

PHPJabbers Event Booking Calendar v4.0 is vulnerable to Cross-Site Scripting (XSS) in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key" parameters which allows attackers to execute arbitrary code

EPSS

Процентиль: 45%
0.00228
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
12 месяцев назад

PHPJabbers Event Booking Calendar v4.0 is vulnerable to Cross-Site Scripting (XSS) in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key" parameters which allows attackers to execute arbitrary code

EPSS

Процентиль: 45%
0.00228
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79