CVE-2023-23012

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-23012

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-23012.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-23012

Published

2023-01-20T19:15:18.060Z

Modified

2026-04-10T04:55:31.299171Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

Cross Site Scripting (XSS) vulnerability in craigrodway classroombookings 2.6.4 allows attackers to execute arbitrary code or other unspecified impacts via the input bgcol in file Weeks.php.

References

Affected packages

Git / github.com/craigrodway/classroombookings

Affected ranges

Type

GIT

Repo

https://github.com/craigrodway/classroombookings

Events

Introduced

Last affected

8977b42edb01f332a2e8abed1518a3f25287740e

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.6.4"
        }
    ]
}

Affected versions

v2.*

v2.3.0-beta.1

v2.3.0-beta.2

v2.3.1

v2.3.2

v2.6.4

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-23012.json"