CVE-2023-48826
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Dec 7, 2023
Updated: Dec 9, 2023
CWE ID 74
Summary
CVE-2023-48826: A critical vulnerability has been identified in Time Slots Booking Calendar 4.0. Hackers can exploit this CSV Injection flaw through the unique ID field in the Reservations List. Successful attacks may lead to unauthorized access, data modification, or system compromise. Users are advised to apply the necessary patches or upgrades to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Vendors
- PHPJabbers