← All advisories

Medium severity6.1NVD Advisory· Published Oct 10, 2023· Updated Jun 17, 2026

CVE-2023-36126

CVE-2023-36126

Description

There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Appointment Scheduler v3.0

Affected products

3

Phpjabbers/Appointment Scheduler3 versions
cpe:2.3:a:phpjabbers:appointment_scheduler:3.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:phpjabbers:appointment_scheduler:3.0:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: =3.0

Patches

Vulnerability mechanics

References

1

medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4nvd

News mentions

0

No linked articles in our index yet.