CVE Catalog
CVE-2023-36131
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.75%
50th percentile - higher than 50% of all known CVEs
Summary
PHPJabbers Availability Booking Calendar version 5.0 is vulnerable to Incorrect Access Control due to improper input validation of the password parameter.
Risk Assessment
Improper access control may lead to unauthorized access to sensitive data, posing a significant security risk to the organization.
Recommendation
It is recommended to update to the latest version of the software and implement additional input validation mechanisms.
Original NVD description (English source)
PHPJabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control due to improper input validation of password parameter.