CVE-2002-0933: Datalex Bookit Consumer

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

Datalex PLC BookIt! Consumer before 2.2 stores usernames and passwords in plaintext in a cookie, which could allow remote attackers to gain privileges via Cross-site scripting or sniffing attacks.

Affected products

• Datalex Bookit Consumer: up to and including 2.1

Published 2002-10-04. Last modified 2026-06-16.