VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Aug 10, 2023· Updated Jun 17, 2026

CVE-2023-36312

CVE-2023-36312

Description

There is a Cross Site Scripting (XSS) vulnerability in the value-enum-o_bf_include_timezone parameter of index.php in PHPJabbers Callback Widget v1.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Phpjabbers/Callback Widget2 versions
    cpe:2.3:a:phpjabbers:callback_widget:1.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:phpjabbers:callback_widget:1.0:*:*:*:*:*:*:*
    • (no CPE)range: = 1.0
  • PHPJabbers/Callback Widgetdescription

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.