All packages
Minical 1.0.0 vulnerabilities
3 known CVE vulnerabilities in Minical 1.0.0, translated and rated.
- CVE-2023-3307Medium
A critical vulnerability was found in miniCal 1.0.0, affecting unknown processing of the file /booking/show_bookings/. Manipulation of the argument search_query leads to SQL injection.
- CVE-2023-33409Medium
Minical version 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF) via minical/public/application/controllers/settings/company.php.
- CVE-2023-33408Medium
Minical version 1.0.0 is vulnerable to Cross Site Scripting (XSS) due to insufficient input validation in the application's user input handling in the security_helper.php file.