VYPR
← All advisories
Medium severity4.7NVD Advisory· Published Feb 19, 2025· Updated Jun 17, 2026

CVE-2023-51298

CVE-2023-51298

Description

PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Phpjabbers/Event Booking Calendar3 versions
    cpe:2.3:a:phpjabbers:event_booking_calendar:4.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:phpjabbers:event_booking_calendar:4.0:*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: 4.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.