CVE-2023-36138: XSS
First published: Thu Aug 03 2023(Updated: )
PHPJabbers Cleaning Business Software 1.0 is vulnerable to Cross Site Scripting (XSS) via the theme parameter of preview.php.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| PHPJabbers Cleaning Business Software | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2023-36138.
What is the severity level of CVE-2023-36138?
The severity level of CVE-2023-36138 is medium.
How does the vulnerability affect PHPJabbers Cleaning Business Software 1.0?
The vulnerability affects PHPJabbers Cleaning Business Software 1.0 through the theme parameter of preview.php.
What is the Common Weakness Enumeration (CWE) ID associated with CVE-2023-36138?
The CWE ID associated with CVE-2023-36138 is CWE-79.
Are there any references related to this vulnerability?
Yes, you can refer to the following links for more information: [Medium Article](https://medium.com/@bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4) and [PHPJabbers](https://www.phpjabbers.com/cleaning-business-software/).
- collector/nvd-latest
- collector/nvd-api
- collector/nvd-index
- agent/weakness
- agent/author
- agent/references
- agent/type
- agent/event
- agent/severity
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/phpjabbers
- canonical/phpjabbers cleaning business software
- version/phpjabbers cleaning business software/1.0