Phpjabbers Event Ticketing System — known CVE vulnerabilities

Every CVE whose affected-product data names Phpjabbers Event Ticketing System, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2023-51339 — CVSS 6.5 (medium): A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Event Ticketing System v1.0 allows attackers to send an excessive…
• CVE-2023-51303 — CVSS 6.1 (medium): PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple HTML Injection in the "lid, name, plugin_sms_api_key…
• CVE-2023-51306 — CVSS 5.4 (medium): PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "name, title" parameters.
• CVE-2023-51337 — CVSS 5.4 (medium): PHPJabbers Event Ticketing System v1.0 is vulnerable to Reflected Cross-Site Scripting (XSS) in "lid" parameter in index.