CVE-2023-36312

Name of the Vulnerable Software and Affected Versions PHPJabbers Callback Widget version 1.0

Description There is a Cross Site Scripting (XSS) issue in the value-enum-o bf include timezone parameter of index.php. This allows for potential malicious script execution.

Recommendations For PHPJabbers Callback Widget version 1.0, consider disabling the value-enum-o bf include timezone parameter in index.php as a temporary workaround until a patch is available. Restrict access to the index.php file to minimize the risk of exploitation. Avoid using the value-enum-o bf include timezone parameter until the issue is resolved.