What’s Vulnerable › Products

CommonsBooking vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your CommonsBooking version is affected

Latest CommonsBooking vulnerabilities

• CVE-2024-4382 — CB (legacy) <= 0.9.4.18 - Code/Timeframe/Booking Deletion via CSRF (CVSS 6.5)
• CVE-2024-4381 — CB (legacy) <= 0.9.4.18 - Admin+ Stored XSS (CVSS 4.8)
• CVE-2022-0658 — CommonsBooking < 2.6.8 - Unauthenticated SQL Injection (CVSS 9.8)