CVE-2023-48825

5.4 mediumEPSS 0.5%

Medium (5.4) in phpjabbers availability booking calendar. EPSS 0.5% chance of exploitation in the next 30 days.

Availability Booking Calendar 5.0 is vulnerable to Multiple HTML Injection issues via SMS API Key or Default Country Code.

Severity

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2023-12-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19