CVE-2023-41537

MediumCVSS 6.1

Published: 30/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

30th percentile - higher than 30% of all known CVEs

phpjabbers Business Directory Script version 3.2 is vulnerable to Cross Site Scripting (XSS) via the 'keyword' parameter.

Exploitation of this vulnerability may lead to user data theft or session hijacking, posing a threat to the application's and its users' security.

It is recommended to update the script to the latest version and to validate and sanitize input data to minimize the risk of XSS.

Original NVD description (English source)

phpjabbers Business Directory Script 3.2 is vulnerable to Cross Site Scripting (XSS) via the keyword parameter.