Vulnerabilities (CVE)

Filtered by vendor Stivasoft Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-35416 1 Stivasoft 1 Phpjabbers Appointment Scheduler 2020-12-18 4.3 MEDIUM 6.1 MEDIUM
Multiple cross-site scripting (XSS) vulnerabilities exist in PHPJabbers Appointment Scheduler 2.3, in the index.php admin login webpage (with different request parameters), allows remote attackers to inject arbitrary web script or HTML.
CVE-2017-12810 1 Stivasoft 1 Phpjabbers Newsletter Script 2018-01-11 4.3 MEDIUM 6.1 MEDIUM
PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel.
CVE-2017-12811 1 Stivasoft 1 Phpjabbers Star Rating Script 2018-01-11 4.3 MEDIUM 6.1 MEDIUM
PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item.
CVE-2017-12812 1 Stivasoft 1 Phpjabbers Night Club Booking Software 2018-01-11 4.3 MEDIUM 6.1 MEDIUM
PHPJabbers Night Club Booking Software has stored XSS in the name parameter in the reservations tab.
CVE-2017-12813 1 Stivasoft 1 Phpjabbers File Sharing Script 2018-01-11 4.3 MEDIUM 6.1 MEDIUM
PHPJabbers File Sharing Script 1.0 has stored XSS in the comments section.