CVE Tools
Track your stack

Cinema Booking System

10 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Cinema Booking System, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Cinema Booking System CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Cinema Booking System CVEs per month
MonthCVEs
2024-110
2024-120
2025-010
2025-028
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-040
2026-050
2026-060
2026-072
2026-080
2026-090
2026-100

Severity

How the 10 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical225%
  • High113%
  • Medium563%

Latest CVEs

The 10 most recently published vulnerabilities affecting Cinema Booking System.

  1. CVE-2025-67651CSRF in PHP Jabbers scripts—
  2. CVE-2025-67650Authenticated SQL Injection in PHP Jabbers scripts—
  3. CVE-2023-51334A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cinema Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible ...5.3
  4. CVE-2023-51333PHPJabbers Cinema Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on ...8.8
  5. CVE-2023-51335PHPJabbers Cinema Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "title, name" parameters.6.5
  6. CVE-2023-51330PHPJabbers Cinema Booking System v1.0 is vulnerable to Reflected Cross-Site Scripting (XSS) in Now Showing menu "date" parameter.5.4
  7. CVE-2024-57427PHPJabbers Cinema Booking System v2.0 is vulnerable to reflected cross-site scripting (XSS). Multiple endpoints improperly handle user input, allowing malicious scripts to execute in a victim’s b...6.1
  8. CVE-2024-57428A stored cross-site scripting (XSS) vulnerability in PHPJabbers Cinema Booking System v2.0 exists due to unsanitized input in file upload fields (event_img, seat_maps) and seat number configuration...9.3
  9. CVE-2024-57429A cross-site request forgery (CSRF) vulnerability in the pjActionUpdate function of PHPJabbers Cinema Booking System v2.0 allows remote attackers to escalate privileges by tricking an authenticated...5.4
  10. CVE-2024-57430An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows attackers to manipulate database queries via the column parameter. Exploiting this fla...9.8

Product grouping is registry-driven, with AI assist and human review. How it works