Vulnerabilities (CVE)

Filtered by vendor Phpjabbers Subscribe
Filtered by product Appointment Scheduler
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-48841 1 Phpjabbers 1 Appointment Scheduler 2023-12-09 N/A 8.8 HIGH
Appointment Scheduler 3.0 is vulnerable to CSV Injection via a Language > Labels > Export action.
CVE-2023-48840 1 Phpjabbers 1 Appointment Scheduler 2023-12-09 N/A 7.5 HIGH
A lack of rate limiting in pjActionAjaxSend in Appointment Scheduler 3.0 allows attackers to cause resource exhaustion.