CVE-2018-0513: Mtssb.mt-Systems Simple Booking

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in MTS Simple Booking C, MTS Simple Booking Business version 1.28.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• Mtssb.mt-Systems Simple Booking: up to and including 1.2.1; up to and including 1.28.0

Published 2018-02-08. Last modified 2026-06-17.