Phpjabbers Class Scheduling System — known CVE vulnerabilities

Every CVE whose affected-product data names Phpjabbers Class Scheduling System, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2023-36134 — CVSS 9.8 (critical): In PHP Jabbers Class Scheduling System 1.0, lack of verification when changing an email address and/or password (on the Profile Page)…
• CVE-2023-36135 — CVSS 7.5 (high): User enumeration is found in in PHPJabbers Class Scheduling System v1.0. This issue occurs during password recovery, where a difference in…
• CVE-2023-36136 — CVSS 6.5 (medium): PHPJabbers Class Scheduling System 1.0 lacks encryption on the password when editing a user account (update user page) allowing an attacker…
• CVE-2023-36137 — CVSS 6.1 (medium): There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Class Scheduling System 1.0.