Event Booking Calendar vulnerabilities

2 known vulnerabilities in Event Booking Calendar from Phpjabbers. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Event Booking Calendar: Uncontrolled Resource Consumption

  CVE-2023-51293Feb 19, 2025Phpjabbers

  A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Event Booking Calendar v4.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount o

• 9.8 Critical severity

  Event Booking Calendar: Generation of Error Message Containing Sensitive Information

  CVE-2023-40765Aug 28, 2023Phpjabbers

  User enumeration is found in PHPJabbers Event Booking Calendar v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.