Arraytics Booktics vulnerabilities

9 vulnerabilities

Known vulnerabilities in Arraytics Booktics, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.3CVE-2026-112829arrayticsbookticsMissing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.30.7.1CVE-2026-109895arrayticsbooktics
EPSS score
0.18%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arraytics Booktics booktics allows DOM-Based XSS.This issue affects Booktics: from n/a through 1.0.29.9.3CVE-2026-109894arrayticsbooktics
EPSS score
0.24%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arraytics Booktics booktics allows SQL Injection.This issue affects Booktics: from n/a through 1.0.29.5.4CVE-2026-107418arrayticsbooktics+1
EPSS score
0.17%
Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.28.5.3CVE-2026-108477arrayticsbooktics+1
EPSS score
0.18%
Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.28.5.3CVE-2026-62135arrayticsbooktics+1
EPSS score
0.29%
Unauthenticated Broken Access Control in Booktics <= 1.0.24 versions.5.3CVE-2026-39585arrayticsbooktics+1
EPSS score
0.26%
Missing Authorization vulnerability in Arraytics Booktics allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Booktics: from n/a through 1.0.16.9.8CVE-2026-57621arrayticsbooktics+1
EPSS score
0.56%
Unauthenticated PHP Object Injection in Booktics <= 1.0.21 versions.4.3CVE-2026-104390arrayticsbooktics+1
EPSS score
0.21%
Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.27.8.5CVE-2026-28002arrayticsbooktics+1
EPSS score
0.36%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arraytics Booktics allows Blind SQL Injection. This issue affects Booktics: from n/a through 1.0.22.