Callback Widget
Phpjabbers · 5 CVEs
CVE-2023-40756
CRITICAL
User enumeration is found in PHPJabbers Callback Widget v1.0. This issue occurs during password recovery, where a diffe…
Aug 28, 2023
CVE-2023-40755
MEDIUM
There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Callback Widg…
Aug 28, 2023
CVE-2023-36315
MEDIUM
There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Callback Widge…
Aug 10, 2023
CVE-2023-36314
MEDIUM
There is a Cross Site Scripting (XSS) vulnerability in the value-text-o_sms_email_request_message parameters of index.p…
Aug 10, 2023
CVE-2023-36312
MEDIUM
There is a Cross Site Scripting (XSS) vulnerability in the value-enum-o_bf_include_timezone parameter of index.php in P…
Aug 10, 2023
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2023-40756 | User enumeration is found in PHPJabbers Callback Widget v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacke… | CRITICAL | 0.89% | Aug 28, 2023 |
| CVE-2023-40755 | There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Callback Widget v1.0. | MEDIUM | 1.25% | Aug 28, 2023 |
| CVE-2023-36315 | There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Callback Widget v1.0. | MEDIUM | 0.44% | Aug 10, 2023 |
| CVE-2023-36314 | There is a Cross Site Scripting (XSS) vulnerability in the value-text-o_sms_email_request_message parameters of index.php in PHPJabbers Callback Widget v1.0. | MEDIUM | 0.44% | Aug 10, 2023 |
| CVE-2023-36312 | There is a Cross Site Scripting (XSS) vulnerability in the value-enum-o_bf_include_timezone parameter of index.php in PHPJabbers Callback Widget v1.0. | MEDIUM | 0.42% | Aug 10, 2023 |
Showing 1 to 5 of 5 CVEs