CVE-2023-36312

28th percentile - higher than 28% of all known CVEs

There is a Cross Site Scripting (XSS) vulnerability in the value-enum-o_bf_include_timezone parameter of index.php in PHPJabbers Callback Widget v1.0. An attacker can exploit this vulnerability to inject malicious scripts.

Exploitation of this vulnerability may lead to user data theft or session hijacking, posing a serious threat to the application's security and the organization's data.

It is recommended to update PHPJabbers Callback Widget to the latest version that fixes this vulnerability and to implement appropriate input sanitization filters.