Phpjabbers Event Booking Calendar — known CVE vulnerabilities

Every CVE whose affected-product data names Phpjabbers Event Booking Calendar, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2023-40765 — CVSS 9.8 (critical): User enumeration is found in PHPJabbers Event Booking Calendar v4.0. This issue occurs during password recovery, where a difference in…
• CVE-2014-10015 — CVSS 7.5 (high): SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to execute arbitrary SQL…
• CVE-2023-51293 — CVSS 7.5 (high): A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Event Booking Calendar v4.0 allows attackers to…
• CVE-2014-10014 — CVSS 6.8 (medium): Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Event Booking Calendar 2.0 allow remote attackers to hijack the…
• CVE-2023-51295 — CVSS 6.5 (medium): PHPJabbers Event Booking Calendar v4.0 is vulnerable to Multiple HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code…
• CVE-2023-51296 — CVSS 6.1 (medium): PHPJabbers Event Booking Calendar v4.0 is vulnerable to Cross-Site Scripting (XSS) in the "name, plugin_sms_api_key, plugin_sms_country_code…
• CVE-2023-51298 — CVSS 4.7 (medium): PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The…