Phpjabbers Hotel Booking System — known CVE vulnerabilities

Every CVE whose affected-product data names Phpjabbers Hotel Booking System, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2023-40760 — CVSS 9.8 (critical): User enumeration is found in PHP Jabbers Hotel Booking System v4.0. This issue occurs during password recovery, where a difference in…
• CVE-2023-51302 — CVSS 8.8 (high): PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The…
• CVE-2023-51301 — CVSS 7.5 (high): A lack of rate limiting in the "Login Section, Forgot Email" feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an…
• CVE-2023-51297 — CVSS 6.5 (medium): A lack of rate limiting in the 'Email Settings' feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive…
• CVE-2023-51299 — CVSS 6.1 (medium): PHPJabbers Hotel Booking System v4.0 is vulnerable to HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code, title…
• CVE-2023-51300 — CVSS 6.1 (medium): PHPJabbers Hotel Booking System v4.0 is vulnerable to Cross-Site Scripting (XSS) vulnerabilities in the "name, plugin_sms_api_key…