Phpjabbers Event Ticketing System vulnerabilities

4 CVEs affecting Phpjabbers Event Ticketing System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-51339, published 2025-02-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-51339, published 2025-02-20. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Event Ticketing System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible…
CVE-2023-51303, published 2025-02-19. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple HTML Injection in the "lid, name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key, title" parameters.
CVE-2023-51306, published 2025-02-20. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "name, title" parameters.
CVE-2023-51337, published 2025-02-20. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. PHPJabbers Event Ticketing System v1.0 is vulnerable to Reflected Cross-Site Scripting (XSS) in "lid" parameter in index.