Unrated severityNVD Advisory· Published Feb 19, 2025· Updated Feb 20, 2025

CVE-2023-51298

Description

PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Phpjabbers/Event Booking Calendarcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: =4.0

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/176487/PHPJabbers-Event-Booking-Calendar-4.0-CSV-Injection.htmlmitre
www.phpjabbers.com/event-booking-calendar/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000