Event booking calendar

This hub aggregates every CVE we track for Event booking calendar, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 8 most recently published vulnerabilities affecting Event booking calendar.

• CVE-2023-51295PHPJabbers Event Booking Calendar v4.0 is vulnerable to Multiple HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key, title" parameters.6.5May 8, 2025
• CVE-2023-51293A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Event Booking Calendar v4.0 allows attackers to send an excessive amount of email for a legitimate user, lea...7.5Feb 19, 2025
• CVE-2023-51296PHPJabbers Event Booking Calendar v4.0 is vulnerable to Cross-Site Scripting (XSS) in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key" parameters which allows atta...6.1Feb 19, 2025
• CVE-2023-51298PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on...4.7Feb 19, 2025
• CVE-2023-40765User enumeration is found in PHPJabbers Event Booking Calendar v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is v...9.8Aug 28, 2023
• CVE-2023-3558GZ Scripts Event Booking Calendar load.php cross site scripting3.5Jul 8, 2023
• CVE-2014-10014Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Event Booking Calendar 2.0 allow remote attackers to hijack the authentication of administrators for requests that (1) chang...6.8Jan 13, 2015
• CVE-2014-10015SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter.7.5Jan 13, 2015