CVE-2023-4110

Name of the Vulnerable Software and Affected Versions PHP Jabbers Availability Booking Calendar version 5.0

Description A vulnerability has been found in the software, classified as problematic. It affects an unknown functionality of the file /index.php. The manipulation of the session id argument leads to cross-site scripting. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond.

Recommendations For PHP Jabbers Availability Booking Calendar version 5.0, as a temporary workaround, consider restricting access to the /index.php file or disabling the manipulation of the session id argument until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.