https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T21:28:57.620566+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-37330 CVE-2021-37330 2026-10-08T21:28:57.636408+00:00

Laravel Booking System Booking Core 2.0 is vulnerable to Cross Site Scripting (XSS). The Avatar upload in the My Profile section could be exploited to upload a malicious SVG file which contains Javascript. Now if another user/admin views the profile and clicks to view his avatar, an XSS will trigger.