CVE-2023-34869

MediumCVSS 6.1

Published: 01/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

23th percentile - higher than 23% of all known CVEs

Summary

A cross-site scripting (XSS) vulnerability was discovered in PHPJabbers Catering System v1.0 via the component /index.php?controller=pjAdmin&action=pjActionForgot.

Risk Assessment

Exploitation of this vulnerability could lead to user data theft or session hijacking, posing a serious security threat to the organization.

Recommendation

It is recommended to update the system to the latest version and implement input data filtering to minimize the risk of XSS attacks.

Original NVD description (English source)

PHPJabbers Catering System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /index.php?controller=pjAdmin&action=pjActionForgot.