event ticketing system vulnerabilities and fixes

Recent CVEs affecting event ticketing system, with upgrade or downgrade steps. 3 tracked.

Also searched as: eventticketingsystem.

event ticketing system has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-02-20. Highest priority: CVE-2023-51339 (score 41/100).

• CVE-2023-51339 MEDIUM 6.5 DOWNGRADE A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Event Ticketing System v1.0 allows atta
• CVE-2023-51337 MEDIUM 5.4 DOWNGRADE PHPJabbers Event Ticketing System v1.0 is vulnerable to Reflected Cross-Site Scripting (XSS) in "lid" paramete
• CVE-2023-51306 MEDIUM 5.4 DOWNGRADE PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "nam

FAQ

How do I fix event ticketing system vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is event ticketing system being exploited right now?

None of the tracked event ticketing system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which event ticketing system CVE should I patch first?

CVE-2023-51339 currently ranks highest (41/100): A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Event Ticketing System v1.0 allows atta.

RSS feed for event ticketing system · ← Back to latest CVEs