PatchTheCVE: esoft plannerhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-48536: Incorrect access control in eSoft Planner 3.24.08271-USA allow attackers to view all transactions performed byhttps://patchthecve.com/cve/CVE-2024-48536.htmlhttps://patchthecve.com/cve/CVE-2024-48536.htmlWed, 17 Jun 2026 07:58:33 +0000HIGH 7.5: Incorrect access control in eSoft Planner 3.24.08271-USA allow attackers to view all transactions performed by the company via supplying a crafted web request.CVE-2024-48535: A stored cross-site scripting (XSS) vulnerability in eSoft Planner 3.24.08271-USA allows attackers to execute https://patchthecve.com/cve/CVE-2024-48535.htmlhttps://patchthecve.com/cve/CVE-2024-48535.htmlWed, 17 Jun 2026 07:58:33 +0000MEDIUM 5.4: A stored cross-site scripting (XSS) vulnerability in eSoft Planner 3.24.08271-USA allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter.CVE-2024-48534: A reflected cross-site scripting (XSS) vulnerability on the Camp Details module of eSoft Planner 3.24.08271-UShttps://patchthecve.com/cve/CVE-2024-48534.htmlhttps://patchthecve.com/cve/CVE-2024-48534.htmlWed, 17 Jun 2026 07:58:33 +0000MEDIUM 5.4: A reflected cross-site scripting (XSS) vulnerability on the Camp Details module of eSoft Planner 3.24.08271-USA allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload.CVE-2024-48533: A discrepancy between responses for valid and invalid e-mail accounts in the Forgot your Login? module of eSofhttps://patchthecve.com/cve/CVE-2024-48533.htmlhttps://patchthecve.com/cve/CVE-2024-48533.htmlWed, 17 Jun 2026 07:58:33 +0000MEDIUM 5.3: A discrepancy between responses for valid and invalid e-mail accounts in the Forgot your Login? module of eSoft Planner 3.24.08271-USA allows attackers to enumerate valid user e-mail accounts.CVE-2024-48531: A reflected cross-site scripting (XSS) vulnerability on the Rental Availability module of eSoft Planner 3.24.0https://patchthecve.com/cve/CVE-2024-48531.htmlhttps://patchthecve.com/cve/CVE-2024-48531.htmlWed, 17 Jun 2026 07:58:33 +0000MEDIUM 5.4: A reflected cross-site scripting (XSS) vulnerability on the Rental Availability module of eSoft Planner 3.24.08271-USA allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload.CVE-2024-48530: An issue in the Instructor Appointment Availability module of eSoft Planner 3.24.08271-USA allows attackers tohttps://patchthecve.com/cve/CVE-2024-48530.htmlhttps://patchthecve.com/cve/CVE-2024-48530.htmlWed, 17 Jun 2026 07:58:32 +0000HIGH 7.5: An issue in the Instructor Appointment Availability module of eSoft Planner 3.24.08271-USA allows attackers to cause a Denial of Service (DoS) via a crafted POST request.