Vulnerabilities (CVE)

Filtered by vendor Phpjabbers Subscribe
Filtered by product Class Scheduling System
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-36136 1 Phpjabbers 1 Class Scheduling System 2023-08-10 N/A 6.5 MEDIUM
PHPJabbers Class Scheduling System 1.0 lacks encryption on the password when editing a user account (update user page) allowing an attacker to capture all user names and passwords in clear text.
CVE-2023-36137 1 Phpjabbers 1 Class Scheduling System 2023-08-08 N/A 6.1 MEDIUM
There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Class Scheduling System 1.0.