Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2023-08-08	CVE-2023-36136	Cleartext Storage of Sensitive Information vulnerability in PHPjabbers Class Scheduling System 1.0 PHPJabbers Class Scheduling System 1.0 lacks encryption on the password when editing a user account (update user page) allowing an attacker to capture all user names and passwords in clear text. network low complexity phpjabbers CWE-312	6.5
2023-08-04	CVE-2023-36137	Cross-site Scripting vulnerability in PHPjabbers Class Scheduling System 1.0 There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Class Scheduling System 1.0. network low complexity phpjabbers CWE-79	6.1