CVE Catalog
CVE-2023-36133
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.75%
50th percentile - higher than 50% of all known CVEs
Summary
PHPJabbers Availability Booking Calendar version 5.0 is vulnerable to User Account Takeover through username/password change.
Risk Assessment
Account takeover can lead to unauthorized access to data and application functions, posing a serious security threat to the organization.
Recommendation
It is recommended to update to the latest version of PHPJabbers Availability Booking Calendar and implement additional security measures for user accounts.
Original NVD description (English source)
PHPJabbers Availability Booking Calendar 5.0 is vulnerable to User Account Takeover through username/password change.