Vulnerabilities > Phpjabbers > Make AN Offer Widget

DATE CVE VULNERABILITY TITLE RISK
2023-08-28 CVE-2023-40752 Cross-site Scripting vulnerability in PHPjabbers Make AN Offer Widget 1.0
There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Make an Offer Widget v1.0.
network
low complexity
phpjabbers CWE-79
6.1
2023-08-28 CVE-2023-40767 Information Exposure Through an Error Message vulnerability in PHPjabbers Make AN Offer Widget 1.0
User enumeration is found in in PHPJabbers Make an Offer Widget v1.0.
network
low complexity
phpjabbers CWE-209
critical
9.8