Startbooking maintains a scheduling and online-booking plugin product that provides appointment-management functionality for small to medium business websites, with the observed vulnerability exposure centered on web-application input handling and authorization boundaries. The recurring weakness classes—cross-site scripting and missing authorization—are characteristic of user-facing booking interfaces where input validation and access control determine the integrity of scheduling data and user isolation. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Startbooking over time
Signals from CVEs in this vendor scope (2 CVEs).
2 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-1634MEDIUM The Scheduling Plugin – Online Booking for WordPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'cbsb_disconnect_setti | Jun 18, 2024 | 6.5 | 18 | NO | NO |
CVE-2024-23517MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Start Booking Scheduling Plugin – Online Booking for WordPress allows Stored X | Feb 10, 2024 | 5.4 | 17 | NO | NO |
Signals from CVEs in this vendor scope (2 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Startbooking.
Media articles that mention a CVE ID that affects a product developed by Startbooking — matched by CVE ID, not by vendor name.