CVE-2023-33560

MediumCVSS 6.1

Published: 01/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.43%

35th percentile - higher than 35% of all known CVEs

Summary

There is a Cross Site Scripting (XSS) vulnerability in the 'cid' parameter of preview.php in PHPJabbers Time Slots Booking Calendar v3.3. An attacker can exploit this vulnerability to inject malicious JavaScript code.

Risk Assessment

Exploitation of this vulnerability may lead to user data theft or session hijacking. Organizations should be aware of the security risks associated with web applications.

Recommendation

It is recommended to update to the latest version of PHPJabbers Time Slots Booking Calendar and to validate and sanitize input data in the application.

Original NVD description (English source)

There is a Cross Site Scripting (XSS) vulnerability in "cid" parameter of preview.php in PHPJabbers Time Slots Booking Calendar v3.3.