Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

melograno — Vulnerabilities & Security Advisories 6

Browse all 6 CVE security advisories affecting melograno. AI-powered Chinese analysis, POCs, and references for each vulnerability.

CVE ID Title CVSS Severity Published
CVE-2026-16582 Booking for Appointments and Events Calendar - Amelia <= 2.4.5 - Missing Authorization to Unauthenticated Payment Bypass — Booking for Appointments and Events Calendar – Amelia CWE-862 5.3 Medium 2026-09-17
CVE-2026-14311 Booking for Appointments and Events Calendar – Amelia (Premium) <= 2.4.4 - Authenticated (Custom+) Missing Authorization to Limited Account Takeover — Booking for Appointments and Events Calendar – Amelia CWE-862 5.4 Medium 2026-09-17
CVE-2026-10148 Booking for Appointments and Events Calendar – Amelia <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'load_manually' Parameter — Booking for Appointments and Events Calendar – Amelia CWE-79 6.4 Medium 2026-09-12
CVE-2026-9055 Booking for Appointments and Events Calendar – Amelia (Premium) 8.0 - 9.6.2 - Unauthenticated Privilege Escalation to Administrator via 'externalId' — Booking for Appointments and Events Calendar – Amelia CWE-269 9.8 Critical 2026-09-02
CVE-2026-6286 Booking for Appointments and Events Calendar <= 2.2 - Unauthenticated Stored Cross-Site Scripting via Customer Name Fields in Booking Submission — Booking for Appointments and Events Calendar – Amelia CWE-79 7.2 High 2026-08-28
CVE-2026-14782 Booking for Appointments and Events Calendar – Amelia <= 2.4.3 - Authenticated (Custom+) SQL Injection via Customer Import — Booking for Appointments and Events Calendar – Amelia CWE-89 4.9 Medium 2026-07-16

This page lists every published CVE security advisory associated with melograno. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.