Rental Bike Script Project Rental Bike Script — known CVE vulnerabilities

Every CVE whose affected-product data names Rental Bike Script Project Rental Bike Script, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2019-7433 — CVSS 8.8 (high): PHP Scripts Mall Rental Bike Script 2.0.3 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature.
• CVE-2019-7434 — CVSS 6.5 (medium): PHP Scripts Mall Rental Bike Script 2.0.3 has directory traversal via a direct request for a listing of an uploads directory.
• CVE-2019-7432 — CVSS 5.4 (medium): PHP Scripts Mall Rental Bike Script 2.0.3 has HTML injection via the STREET field in the Profile Edit section.