CVE-2023-33560

Name of the Vulnerable Software and Affected Versions PHPJabbers Time Slots Booking Calendar version 3.3

Description The issue is related to a Cross Site Scripting (XSS) vulnerability. It affects the cid parameter of the preview.php file. This vulnerability can potentially be exploited to execute malicious scripts on the client-side.

Recommendations For PHPJabbers Time Slots Booking Calendar version 3.3, consider restricting access to the cid parameter in the preview.php file until a patch is available. As a temporary workaround, avoid using the cid parameter in the affected endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.