Booking Calendar Contact Form
codepeople
Developer
1.2.67
Latest version
500
Installations
No date
Last updated
Vulnerability history
0 present
17 patched
8 Mitigation rules
- Reflected Cross-Site Scripting vulnerability<= 1.0.2304/08/2026
- Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability<= 1.0.2304/08/2026
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 1.1.2404/08/2026
- Shortcode SQL Injection vulnerability<= 1.0.2303/08/2026
- Blind SQL Injection vulnerability< 1.0.2403/08/2026
- Authenticated (Subscriber+) Insecure Direct Object Reference to Calendar Takeover vulnerability<= 1.2.6323/04/2026
- Missing Authorization to Unauthenticated Arbitrary Booking Confirmation via 'dex_bccf_ipn' Parameter vulnerability<= 1.2.6022/11/2025
- Cross Site Scripting (XSS) Vulnerability<= 1.2.5830/06/2025
- Stored Cross Site Scripting (XSS) vulnerability<= 1.2.5524/01/2025
- Cross Site Scripting (XSS)<= 1.2.4022/06/2023
- Broken Access Control vulnerability<= 1.2.3406/02/2023
- Multiple Vulnerabilities<= 1.0.2308/02/2016
- Addslashes SQL Injection<= 1.1.2427/01/2016
- Multiple Vulnerabilities<= 1.1.2427/01/2016
- Shortcode SQL Injection<= 1.1.2326/01/2016
- Unauthenticated SQL Injection<= 1.1.2325/01/2016
- Multiple vulnerabilities<= 1.0.213/05/2015