Medium severity5.4NVD Advisory· Published Dec 7, 2023· Updated Jun 17, 2026

CVE-2023-48836

Description

Car Rental Script 3.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via the name, plugin_sms_api_key, plugin_sms_country_code, calendar_id, title, country name, or customer_name parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Car Rental Script/Car Rental Scriptdescription
Phpjabbers/Car Rental Scriptllm-create
Range: =3.0
Car Rental Script Project/Car Rental Scriptllm-fuzzy
Range: =3.0

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/176046nvdExploitThird Party AdvisoryVDB Entry
www.phpjabbers.com/car-rental-script/nvdProduct

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000