Vulnerabilidades do Sbitsoft Eventobot

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Sbitsoft Eventobot: 2 registro(s), com versões afetadas e correções.
cpe:2.3:a:sbitsoft:eventobot

CVE-2025-40639 Crítica · 9.8 CWE-89 09/03/2026

SQL injection in Eventobot

A SQL injection vulnerability has been found in Eventobot. This vulnerability allows an attacker to retrieve, create, update and delete databases through the 'promo_send' parameter in the '/assets/php/calculate_discount.php'.

CVE-2025-40638 Média · 6.1 CWE-79 09/03/2026

Reflected Cross-Site Scripting (XSS) in Eventobot

A reflected Cross-Site Scripting (XSS) vulnerability has been found in Eventobot. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending him/her a malicious URL using the 'name' parameter in '/search-results'. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user.