Improper Input Validation in PHP Jabbers Time Slots Booking Calendar
CVE-2023-33561

9.8CRITICAL

Key Information:

Vendor

PHPjabbers

Status
Time Slots Booking Calendar
Vendor
CVE Published:
1 August 2023

What is CVE-2023-33561?

The Time Slots Booking Calendar by PHP Jabbers suffers from improper input validation related to its password parameter. This flaw allows an attacker to set insecure passwords, potentially compromising user accounts and sensitive data. Users of version 3.3 of this product should take immediate action to secure their installations by reviewing password policies and applying necessary updates.

References

https://www.phpjabbers.com/time-slots-booking-calendar/
https://medium.com/%40bcksec/multiple-vulnerabilities-in-...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.