CVE-2023-41538

MediumCVSS 6.1

Published: 30/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.09%

61th percentile - higher than 61% of all known CVEs

phpjabbers PHP Forum Script version 3.0 is vulnerable to Cross Site Scripting (XSS) via the 'keyword' parameter.

An attacker could exploit this vulnerability to inject malicious JavaScript code, potentially leading to user data theft or session hijacking.

It is recommended to update the forum script to the latest version to mitigate this vulnerability and implement input data filtering.

Original NVD description (English source)

phpjabbers PHP Forum Script 3.0 is vulnerable to Cross Site Scripting (XSS) via the keyword parameter.