CVE-2023-36313

MediumCVSS 6.1

Published: 10/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.39%

30th percentile - higher than 30% of all known CVEs

Summary

PHPJabbers Document Creator version 1.0 is vulnerable to Cross Site Scripting (XSS) via all POST parameters of 'Export Requests' except for 'request_feed'.

Risk Assessment

Exploitation of this vulnerability could lead to user data theft or session hijacking, posing a serious security threat to the application.

Recommendation

It is recommended to update to the latest version of the software and to validate and sanitize all input data to minimize the risk of XSS.

Original NVD description (English source)

PHPJabbers Document Creator v1.0 is vulnerable to Cross Site Scripting (XSS) via all post parameters of "Export Requests" aside from "request_feed".