high8.8
CVE-2023-48207
Availability Booking Calendar 5.0 allows CSV injection via the unique ID field in the Reservations list component.
Impact
Availability Booking Calendar 5.0 allows CSV injection via the unique ID field in the Reservations list component.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpjabbers | Availability Booking Calendar | Version 5.0 |