CVE-2023-36138

MediumCVSS 6.1

Published: 04/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.39%

30th percentile - higher than 30% of all known CVEs

PHPJabbers Cleaning Business Software version 1.0 is vulnerable to Cross Site Scripting (XSS) via the theme parameter of preview.php.

Exploitation of this vulnerability could lead to user data theft or session hijacking, posing a serious security threat to the application.

It is recommended to update the software to the latest version and to validate and sanitize input data to minimize the risk of XSS.

Original NVD description (English source)

PHPJabbers Cleaning Business Software 1.0 is vulnerable to Cross Site Scripting (XSS) via the theme parameter of preview.php.