CVE-2025-67651

Name of the Vulnerable Software and Affected Versions PHP Jabbers scripts (affected versions not specified)

Description A Cross-Site Request Forgery (CSRF) issue exists due to the absence of CSRF tokens or appropriate SameSite attributes. This allows an attacker to send unauthorized requests using the session of an authenticated user, which can result in unauthorized administrative actions, including the creation of new admin accounts. CSRF is a technique where a malicious website causes a user's web browser to perform an unwanted action on a different website where the user is currently authenticated.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.