Medium
CVE-2022-1528
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,329
Reset filters
Medium
CVE-2022-1408
VikBooking Hotel Booking Engine & PMS <= 1.5.7 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-1409
VikBooking Hotel Booking Engine & PMS <= 1.5.8 - Arbitrary File Upload
High
CVE-2022-1407
VikBooking Hotel Booking Engine & PMS <= 1.5.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2022-27863
VikBooking Hotel Booking Engine & PMS <= 1.5.3 - Sensitive Information Exposure
Critical
CVE-2022-27862
VikBooking Hotel Booking Engine & PMS <= 1.5.3 - Arbitrary File Upload
High
CVE-2022-1463
Booking Calendar <= 9.1 - PHP Object Injection via Shortcode
Medium
CVE-2021-36847
Webba Booking <= 4.2.21 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
574dd6d8-14df-47b8-bf03-28a3c02b73ec
BookingPress – Appointments Booking Calendar Plugin and Online Scheduling Plugin <= 1.0.13 - SQL Injection
High
CVE-2022-1006
Advanced Booking Calendar <= 1.7.0 - Authenticated SQL Injection
High
CVE-2022-0920
Salon Booking System and Salon Booking System Pro <= 7.6.2 - Sensitive Information Disclosure
Medium
CVE-2022-0919
Salon Booking System and Salon Booking System Pro <= 7.6.2 - Sensitive Data Disclosure
Medium
CVE-2022-1007
Advanced Booking Calendar <= 1.7.0 - Reflected Cross-Site Scripting
Medium
CVE-2022-0837
Appointment and Event Booking Calendar for WordPress – Amelia <= 1.0.47 - Information Disclosure and SMS Spam
Medium
CVE-2022-0825
Appointment and Event Booking Calendar for WordPress – Amelia < 1.0.49 - Arbitrary Booking Update and Sensitive Data Exposure
High
CVE-2022-0709
Booking Package <= 1.5.28 - Unauthenticated Sensitive Data Disclosure
Medium
CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
High
CVE-2022-0834
Amelia <= 1.0.46 - Stored Cross Site Scripting via lastName
Medium
CVE-2022-0720
Appointment and Event Booking Calendar for WordPress - Amelia < 1.0.47 - Arbitrary Booking Update and Sensitive Data Exposure
Critical
CVE-2022-0739
BookingPress < 1.0.11 - SQL Injection
Critical
CVE-2022-0694
Advanced Booking Calendar <= 1.6.9 - Unauthenticated SQL Injection
High
CVE-2022-0687
Appointment and Event Booking Calendar - Amelia < 1.0.47 - Arbitrary File Upload
Medium
CVE-2022-0627
Amelia <= 1.0.46 - Reflected Cross-Site Scripting
Medium
CVE-2022-0616
Amelia <= 1.0.46 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.