Saasproject Booking Package — known CVE vulnerabilities

Every CVE whose affected-product data names Saasproject Booking Package, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2022-0709 — CVSS 7.5 (high): The Booking Package WordPress plugin before 1.5.29 requires a token for exporting the ical representation of it's booking calendar, but…
• CVE-2023-39918 — CVSS 7.1 (high): Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in SAASPROJECT Booking Package Booking Package plugin <= 1.6.01 versions.
• CVE-2021-20840 — CVSS 6.1 (medium): Cross-site scripting vulnerability in Booking Package - Appointment Booking Calendar System versions prior to 1.5.11 allows a remote…