Known vulnerabilities in the Online Booking Scheduling Calendar plugin
19 security advisories have been published for the Online Booking Scheduling Calendar plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Online Booking Scheduling Calendar - Broken Access Control (CVE-2025-67559) MEDIUM
- Online Booking Scheduling Calendar - Cross-Site Request Forgery (CSRF) (CVE-2025-67472) MEDIUM
- Online Booking Scheduling Calendar - Arbitrary File Upload (CVE-2025-54677) CRITICAL
- Online Booking Scheduling Calendar - Cross-Site Scripting (XSS) (CVE-2025-54676) MEDIUM
- Online Booking Scheduling Calendar - Information Disclosure (CVE-2025-32238) MEDIUM
- Online Booking Scheduling Calendar - Cross-Site Request Forgery (CSRF) (CVE-2024-54356) MEDIUM
- Online Booking Scheduling Calendar - Broken Access Control (CVE-2024-9872) MEDIUM
- Online Booking Scheduling Calendar - Cross-Site Scripting (XSS) (CVE-2024-47638) HIGH
- Online Booking Scheduling Calendar - Cross-Site Scripting (XSS) (CVE-2024-37262) HIGH
- Online Booking Scheduling Calendar - Path Traversal (CVE-2024-37499) MEDIUM
- Online Booking Scheduling Calendar - Broken Access Control (CVE-2024-5791) HIGH
- Online Booking Scheduling Calendar - Cross-Site Scripting (XSS) (CVE-2024-35761) MEDIUM
- Online Booking Scheduling Calendar - Cross-Site Scripting (XSS) (CVE-2024-5859) MEDIUM
- Online Booking Scheduling Calendar - Cross-Site Scripting (XSS) (CVE-2023-39992) HIGH
- Online Booking Scheduling Calendar - Broken Access Control (CVE-2023-2414) MEDIUM
- Online Booking Scheduling Calendar - Cross-Site Scripting (XSS) (CVE-2023-2298) HIGH
- Online Booking Scheduling Calendar - Cross-Site Request Forgery (CSRF) (CVE-2023-2416) MEDIUM
- Online Booking Scheduling Calendar - Denial of Service (CVE-2023-2415) MEDIUM
- Online Booking Scheduling Calendar - Broken Access Control (CVE-2023-2299) MEDIUM