Approved changes feed: RSS · Atom

cpe:2.3:a:gzscripts:event_booking_calendar:1.8:*:*:*:*:*:*:*

part: a version: 1.8 update: *

VendorGzscripts (4084ff1d-67ee-5d4d-8642-a612661e9d40)
ProductEvent Booking Calendar (fb7b3508-b598-5cf7-a9aa-ffb833723174)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-3558 vulnerable 2026-06-03 14:52:41.143953 GZ Scripts Event Booking Calendar load.php cross site scripting
LOW (3.5)
A vulnerability classified as problematic has been found in GZ Scripts Event Booking Calendar 1.8. Affected is an unknown function of the file /load.php. The manipulation of the argument first_name/second_name/phone/address_1/country leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-233352. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2023-07-08T14:00:04.816Z
Updated: 2024-08-02T07:01:56.648Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.