PHP Jabbers PHP Poll Script vulnerabilities

2 CVEs affecting PHP Jabbers PHP Poll Script, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-46594, published 2026-07-31.

More from PHP Jabbers.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-46594, published 2026-07-31. Medium severity, CVSS 5.1. EPSS: 0.6% chance of exploitation in the next 30 days. A reflected cross-site scripting (XSS) vulnerability has been identified in the PHP Jabbers - PHP Poll Script. A malicious attacker can craft a specially crafted URL that, when opened, results in…
• CVE-2026-46593, published 2026-07-31. High severity, CVSS 8.6. EPSS: 0.4% chance of exploitation in the next 30 days. A SQL injection vulnerability has been identified in the PHP Jabbers - PHP Poll Script. Improper neutralization of input provided by user to pjAdminPolls.controller.php endpoint allows an…