Lucene search
HistoryDec 07, 2023 - 7:15 a.m.
CVE-2023-48838
cve-2023-48838
appointment scheduler 3.0
html injection
sms api key
default country code
vulnerability
nvd
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
5.7 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
13.1%
Appointment Scheduler 3.0 is vulnerable to Multiple HTML Injection issues via the SMS API Key or Default Country Code.
Affected configurations
Node
phpjabbersappointment_schedulerMatch3.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| phpjabbers:appointment_scheduler | phpjabbers appointment scheduler | eq | 3.0 |
Related
prion
prion
Input validation
2023-12-07 07:15:00
cvelist
cvelist
CVE-2023-48838
2023-12-07 00:00:00
nvd
nvd
CVE-2023-48838
2023-12-07 07:15:12
packetstorm
packetstorm
PHPJabbers Appointment Scheduler 3.0 HTML Injection
2023-12-04 00:00:00
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
5.7 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
13.1%
Related for CVE-2023-48838