CVE-2023-40751

MediumCVSS 6.1

Published: 28/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.04%

60th percentile - higher than 60% of all known CVEs

PHPJabbers Fundraising Script v1.0 is vulnerable to Cross Site Scripting (XSS) via the 'action' parameter of index.php.

Exploitation of this vulnerability could lead to user data theft or session hijacking, posing a serious security threat to the application.

It is recommended to validate and sanitize input data in the 'action' parameter to minimize the risk of XSS attacks.

Original NVD description (English source)

PHPJabbers Fundraising Script v1.0 is vulnerable to Cross Site Scripting (XSS) via the "action" parameter of index.php.