← Database

CVE-2023-23012

MEDIUM CVSS: 6.1 Published: 2023-01-20 Modified: 2026-06-17

Description

Cross Site Scripting (XSS) vulnerability in craigrodway classroombookings 2.6.4 allows attackers to execute arbitrary code or other unspecified impacts via the input bgcol in file Weeks.php.

Affected Platforms

Classroombookings Classroombookings

Weakness Type

CWE-79, CWE-79

References