Account Takeover Vulnerability in PHP Jabbers Time Slots Booking Calendar
CVE-2023-33563
8.8HIGH
What is CVE-2023-33563?
In PHP Jabbers Time Slots Booking Calendar version 3.3, an inadequate verification process when users attempt to change their email address or password on the Profile Page can be exploited by remote attackers. This oversight enables malicious actors to potentially take control of user accounts, posing significant risks to users' sensitive information and transactions.
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved