Account Takeover Vulnerability in PHP Jabbers Time Slots Booking Calendar

CVE-2023-33563

What is CVE-2023-33563?

In PHP Jabbers Time Slots Booking Calendar version 3.3, an inadequate verification process when users attempt to change their email address or password on the Profile Page can be exploited by remote attackers. This oversight enables malicious actors to potentially take control of user accounts, posing significant risks to users' sensitive information and transactions.

References