GCVE - cpe:2.3:a:saasproject_booking_package:booking

Approved changes feed: RSS · Atom

cpe:2.3:a:saasproject_booking_package:booking_package:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Saasproject Booking Package (`84c857eb-6d11-5ec8-8f22-5b35297ece3a`)
Product	Booking Package (`18acce83-4bb9-5a55-acd0-24158b4574aa`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-39918`	vulnerable	2026-06-08 06:09:38.098674	WordPress Booking Package Plugin <= 1.6.01 is vulnerable to Cross Site Scripting (XSS) HIGH (7.1) Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in SAASPROJECT Booking Package Booking Package plugin <= 1.6.01 versions. Published: 2023-09-04T10:05:47.965Z Updated: 2026-04-28T16:08:34.791Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/booking-package/wordpress-booking-package-plugin-1-6-01-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-37389`	vulnerable	2026-06-08 06:08:15.218947	WordPress Booking Package SAASPROJECT plugin <= 1.5.98 - Unauthenticated Privilege Escalation vulnerability HIGH (8.8) Improper Privilege Management vulnerability in SAASPROJECT Booking Package Booking Package allows Privilege Escalation.This issue affects Booking Package: from n/a through 1.5.98. Published: 2024-05-17T06:47:46.365Z Updated: 2026-04-28T16:08:32.132Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/booking-package/wordpress-booking-package-saasproject-plugin-1-5-98-unauthenticated-privilege-escalation-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.