Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Online Scheduling and Appointment Booking System – Bookly — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in Online Scheduling and Appointment Booking System – Bookly, with AI-generated Chinese analysis, references, and POCs.

Vendor: ladela

CVE IDTitleCVSSSeverityPublished
CVE-2026-13424 Online Scheduling and Appointment Booking System <= 27.7 - Unauthenticated Stored Cross-Site Scripting via bookly_speed_up_update_addons AJAX action CWE-79 7.2 High2026-08-16
CVE-2026-12905 Online Scheduling and Appointment Booking System – Bookly <= 27.7 - Authenticated (Staff+) Insecure Direct Object Reference to Sensitive Information Exposure via 'params[id]' Parameter CWE-639 4.3 Medium2026-08-16
CVE-2026-14516 Online Scheduling and Appointment Booking System <= 27.5 - Unauthenticated SQL Injection CWE-89 7.5 High2026-07-28
CVE-2026-5513 Online Scheduling and Appointment Booking System – Bookly <= 27.2 - Unauthenticated Stored Cross-Site Scripting via 'bookly-customer-full-name' Cookie CWE-79 7.2 High2026-06-13
CVE-2026-2519 Online Scheduling and Appointment Booking System – Bookly <= 27.0 - Unauthenticated Price Manipulation via 'tips' CWE-472 5.3 Medium2026-04-09
CVE-2024-5584 WordPress Online Booking and Scheduling Plugin – Bookly <= 23.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Color Profile Parameter CWE-79 6.4 Medium2024-06-11

All 6 known CVE vulnerabilities affecting Online Scheduling and Appointment Booking System – Bookly with full Chinese analysis, references, and POCs where available.