agentprime: masaakitanaka-booking-packageEvery new CVE for masaakitanaka-booking-package.https://agentprime.io/CVE-2026-103425: Booking Package <= 1.7.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attributehttps://agentprime.io/advisories/CVE-2026-103425/https://agentprime.io/advisories/CVE-2026-103425/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 01:27:13 GMTCVECVE-2026-103423: Booking Package <= 1.7.29 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'mode=sendBooking' with nonexistent 'timeKey' and 'public=0'https://agentprime.io/advisories/CVE-2026-103423/https://agentprime.io/advisories/CVE-2026-103423/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 01:27:12 GMTCVECVE-2026-15335: Booking Package <= 1.7.20 - Unauthenticated SQL Injection via 'email' Form Parameterhttps://agentprime.io/advisories/CVE-2026-15335/https://agentprime.io/advisories/CVE-2026-15335/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 11 Jul 2026 03:44:24 GMTCVECVE-2026-9851: Booking Package <= 1.7.16 - Authenticated (Editor+) Privilege Escalation via Account Takeover to updateUser AJAX Actionhttps://agentprime.io/advisories/CVE-2026-9851/https://agentprime.io/advisories/CVE-2026-9851/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 06 Jun 2026 04:28:19 GMTCVECVE-2026-4911: Booking Package <= 1.7.06 - Unauthenticated Price Manipulation via 'amount' Parameterhttps://agentprime.io/advisories/CVE-2026-4911/https://agentprime.io/advisories/CVE-2026-4911/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Apr 2026 06:45:46 GMTCVECVE-2024-13508: Booking Package <= 1.6.72 - Reflected Cross-Site Scripting via Locale Parameterhttps://agentprime.io/advisories/CVE-2024-13508/https://agentprime.io/advisories/CVE-2024-13508/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Feb 2025 23:22:00 GMTCVE