Skip to content
OpenAdvisories

Vendor

Bookgy

5 known vulnerabilities.

Products

Bookgy 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.1
    CVE-2025-40616

    Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy

    Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the "IDRESERVA" parameter in /bkg_imprimir_comprobante.php.

    Bookgy Bookgy
  • Medium 5.1
    CVE-2025-40615

    Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy

    Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the "TEXTO" parameter in /api/api_ajustes.php.

    Bookgy Bookgy