phpjabbers vulnerabilities

Recent CVEs affecting phpjabbers products. 40 tracked.

phpjabbers has 40 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-12-17. Highest priority: CVE-2024-57430 (score 59/100).

CVE-2025-10827 MEDIUM 4.3 DOWNGRADE A weakness has been identified in PHPJabbers Restaurant Menu Maker up to 1.1
CVE-2024-57430 CRITICAL 9.8 DOWNGRADE An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows
CVE-2024-57429 MEDIUM 5.4 DOWNGRADE A cross-site request forgery (CSRF) vulnerability in the pjActionUpdate function of PHPJabbers Cinema Booking
CVE-2024-57428 CRITICAL 9.3 DOWNGRADE A stored cross-site scripting (XSS) vulnerability in PHPJabbers Cinema Booking System v2.0 exists due to unsan
CVE-2024-57427 MEDIUM 6.1 DOWNGRADE PHPJabbers Cinema Booking System v2.0 is vulnerable to reflected cross-site scripting (XSS)
CVE-2023-53927 MEDIUM 5.4 DOWNGRADE PHPJabbers Simple CMS 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attac
CVE-2023-53926 CRITICAL 9.8 DOWNGRADE PHPJabbers Simple CMS 5.0 contains a SQL injection vulnerability in the 'column' parameter that allows remote
CVE-2023-53877 CRITICAL 9.8 DOWNGRADE Bus Reservation System 1.1 contains a SQL injection vulnerability in the pickup_id parameter that allows attac
CVE-2023-51339 MEDIUM 6.5 DOWNGRADE A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Event Ticketing System v1.0 allows atta
CVE-2023-51338 MEDIUM 5.4 DOWNGRADE PHPJabbers Meeting Room Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the
CVE-2023-51337 MEDIUM 5.4 DOWNGRADE PHPJabbers Event Ticketing System v1.0 is vulnerable to Reflected Cross-Site Scripting (XSS) in "lid" paramete
CVE-2023-51336 HIGH 8.8 DOWNGRADE PHPJabbers Meeting Room Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attac
CVE-2023-51335 MEDIUM 6.5 DOWNGRADE PHPJabbers Cinema Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "titl
CVE-2023-51334 MEDIUM 5.3 DOWNGRADE A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cinema Booking System v1.0 allows attac
CVE-2023-51333 HIGH 8.8 DOWNGRADE PHPJabbers Cinema Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to
CVE-2023-51332 MEDIUM 4.3 DOWNGRADE A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Meeting Room Booking System v1.0 allows
CVE-2023-51331 MEDIUM 6.5 DOWNGRADE PHPJabbers Cleaning Business Software v1.0 is vulnerable to CSV Injection vulnerability which allows an attack
CVE-2023-51330 MEDIUM 5.4 DOWNGRADE PHPJabbers Cinema Booking System v1.0 is vulnerable to Reflected Cross-Site Scripting (XSS) in Now Showing men
CVE-2023-51328 MEDIUM 5.4 DOWNGRADE PHPJabbers Cleaning Business Software v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the
CVE-2023-51327 MEDIUM 6.5 DOWNGRADE A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows
CVE-2023-51326 MEDIUM 6.5 DOWNGRADE A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows
CVE-2023-51325 MEDIUM 5.4 DOWNGRADE PHPJabbers Shared Asset Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the
CVE-2023-51324 MEDIUM 6.5 DOWNGRADE PHPJabbers Shared Asset Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attac
CVE-2023-51323 MEDIUM 6.5 DOWNGRADE A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Shared Asset Booking System v1.0 allows
CVE-2023-51321 MEDIUM 6.5 DOWNGRADE A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Night Club Booking Software v1.0 allows
CVE-2023-51320 MEDIUM 5.3 DOWNGRADE PHPJabbers Night Club Booking Software v1.0 is vulnerable to CSV Injection vulnerability which allows an attac
CVE-2023-51319 HIGH 8.8 DOWNGRADE PHPJabbers Bus Reservation System v1.1 is vulnerable to CSV Injection vulnerability which allows an attacker t
CVE-2023-51318 MEDIUM 5.4 DOWNGRADE PHPJabbers Bus Reservation System v1.1 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "tit
CVE-2023-51317 MEDIUM 6.5 DOWNGRADE PHPJabbers Restaurant Booking System v3.0 is vulnerable to Multiple HTML Injection in the "name, plugin_sms_ap
CVE-2023-51316 HIGH 7.5 DOWNGRADE A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Bus Reservation System v1.1 allows atta
CVE-2023-51315 MEDIUM 5.4 DOWNGRADE PHPJabbers Restaurant Booking System v3.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "
CVE-2023-51314 HIGH 7.5 DOWNGRADE A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Restaurant Booking Sy
CVE-2023-51313 HIGH 8.8 DOWNGRADE PHPJabbers Restaurant Booking System v3.0 is vulnerable to CSV Injection vulnerability which allows an attacke
CVE-2023-51312 MEDIUM 5.4 DOWNGRADE PHPJabbers Restaurant Booking System v3.0 is vulnerable to Reflected Cross-Site Scripting (XSS) in Reservation
CVE-2023-51311 HIGH 8.8 DOWNGRADE PHPJabbers Car Park Booking System v3.0 is vulnerable to CSV Injection vulnerability which allows an attacker
CVE-2023-51310 MEDIUM 4.3 DOWNGRADE A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Car Park Booking Syst
CVE-2023-51309 MEDIUM 4.3 DOWNGRADE A lack of rate limiting in the 'Email Settings' feature of PHPJabbers Car Park Booking System v3.0 allows atta
CVE-2023-51308 MEDIUM 6.1 DOWNGRADE PHPJabbers Car Park Booking System v3.0 is vulnerable to Multiple HTML Injection in the "name, plugin_sms_api_
CVE-2023-51306 MEDIUM 5.4 DOWNGRADE PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "nam
CVE-2023-51295 MEDIUM 6.5 DOWNGRADE PHPJabbers Event Booking Calendar v4.0 is vulnerable to Multiple HTML Injection in the "name, plugin_sms_api_k

FAQ

How do I fix phpjabbers vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is phpjabbers being exploited right now?

None of the tracked phpjabbers CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which phpjabbers CVE should I patch first?

CVE-2024-57430 currently ranks highest (59/100): An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows.

Products

RSS feed for phpjabbers · ← Back to latest CVEs