Skip to content

GZ Scripts · weakness class

Cross-site Scripting

17 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 17 is a mark on the map. Named now: 1 to 17, most at risk first.

  1. GZ Scripts Availability Booking Calendar PHP Image cross site scriptingCVE-2023-3970GZ Scripts · CVSS 3.5 · 0.6% likely

    CWE-79

  2. GZ Scripts Availability Booking Calendar PHP HTTP POST Request index.php cross site scriptingCVE-2023-3969GZ Scripts · CVSS 3.5 · 0.6% likely

    CWE-79

  3. GZ Scripts GZ Multi Hotel Booking System index.php cross site scriptingCVE-2023-3564GZ Scripts · CVSS 3.5 · 0.5% likely

    CWE-79

  4. GZ Scripts GZ E Learning Platform URL Parameter cross site scriptingCVE-2023-3563GZ Scripts · CVSS 3.5 · 0.5% likely

    CWE-79

  5. GZ Scripts PHP CRM Platform index.php cross site scriptingCVE-2023-3562GZ Scripts · CVSS 3.5 · 0.5% likely

    CWE-79

  6. GZ Scripts PHP GZ Hotel Booking Script load.php cross site scriptingCVE-2023-3561GZ Scripts · CVSS 3.5 · 0.5% likely

    CWE-79

  7. GZ Scripts Event Booking Calendar load.php cross site scriptingCVE-2023-3558GZ Scripts · CVSS 3.5 · 0.5% likely

    CWE-79

  8. GZ Scripts Property Listing Script preview.php cross site scriptingCVE-2023-3557GZ Scripts · CVSS 3.5 · 0.5% likely

    CWE-79

  9. GZ Scripts Car Listing Script PHP preview.php cross site scriptingCVE-2023-3556GZ Scripts · CVSS 3.5 · 0.5% likely

    CWE-79

  10. GZ Scripts PHP Vacation Rental Script preview.php cross site scriptingCVE-2023-3555GZ Scripts · CVSS 3.5 · 0.5% likely

    CWE-79

  11. GZ Scripts GZ Forum Script preview.php cross site scriptingCVE-2023-3554GZ Scripts · CVSS 3.5 · 0.5% likely

    CWE-79

  12. GZ Scripts Vacation Rental Website HTTP POST Request cross site scriptingCVE-2023-3642GZ Scripts · CVSS 4.3 · 0.4% likely

    CWE-79

  13. GZ Scripts Time Slot Booking Calendar PHP load.php cross site scriptingCVE-2023-3544GZ Scripts · CVSS 3.5 · 0.4% likely

    CWE-79

  14. GZ Scripts Availability Booking Calendar PHP HTTP POST Request load.php cross site scriptingCVE-2023-3543GZ Scripts · CVSS 3.5 · 0.4% likely

    CWE-79

  15. GZ Scripts Ticket Booking Script load.php cross site scriptingCVE-2023-3560GZ Scripts · CVSS 3.5 · 0.4% likely

    CWE-79

  16. GZ Scripts PHP GZ Appointment Scheduling Script load.php cross site scriptingCVE-2023-3559GZ Scripts · CVSS 3.5 · 0.4% likely

    CWE-79

  17. GZ Scripts Car Rental Script cross site scriptingCVE-2023-3757GZ Scripts · CVSS 3.5 · 0.4% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.