CVE-2023-48207: Phpjabbers Availability Booking Calendar

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Availability Booking Calendar 5.0 allows CSV injection via the unique ID field in the Reservations list component.

Affected products

• Phpjabbers Availability Booking Calendar: version 5.0 only

Published 2023-12-07. Last modified 2026-06-17.