CVE-2023-48208: Phpjabbers Availability Booking Calendar

Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days.

A Cross Site Scripting vulnerability in Availability Booking Calendar 5.0 allows an attacker to inject JavaScript via the name, plugin_sms_api_key, plugin_sms_country_code, uuid, title, or country name parameter to index.php.

Affected products

• Phpjabbers Availability Booking Calendar: version 5.0 only

Published 2023-12-07. Last modified 2026-06-17.