CVE-2023-4110

Summary

CVE-2023-4110 is a newly identified vulnerability affecting PHP Jabbers Availability Booking Calendar version 5.0. This issue lies within an unknown functionality of the /index.php file, leading to a cross-site scripting (XSS) vulnerability. The manipulation of the session_id argument allows remote attackers to inject malicious scripts. The Vulnerability Database (VDB) has assigned the identifier VDB-235957 to this issue. Regrettably, the vendor has yet to respond to disclosure notices regarding this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.