Description
A Cross-Site Request Forgery (CSRF) vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker to send unauthorized requests in the context of an authenticated user, leading to unauthorized administrative actions, such as creating new admin accounts.


This issue was fixed in the versions specified in the affected products list.
Published: 2026-07-31
Score: 6.9 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 31 Jul 2026 12:00:00 +0000

Type Values Removed Values Added
Description A Cross-Site Request Forgery (CSRF) vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker to send unauthorized requests in the context of an authenticated user, leading to unauthorized administrative actions, such as creating new admin accounts. This issue was fixed in the versions specified in the affected products list.
Title CSRF in PHP Jabbers scripts
First Time appeared Php Jabbers
Php Jabbers appointment Scheduler
Php Jabbers auto Classifieds Script
Php Jabbers availability Booking Calendar
Php Jabbers availability Calendar
Php Jabbers bus Reservation System
Php Jabbers business Directory Script
Php Jabbers car Park Booking System
Php Jabbers car Rental Script
Php Jabbers cinema Booking System
Php Jabbers cleaning Business Software
Php Jabbers equipment Rental Script
Php Jabbers event Booking Calendar
Php Jabbers event Ticketing System
Php Jabbers food Delivery Script
Php Jabbers hotel Booking System
Php Jabbers job Listing Script
Php Jabbers limo Booking Software
Php Jabbers meeting Room Booking System
Php Jabbers member Directory Script
Php Jabbers member Login Script
Php Jabbers php Event Calendar
Php Jabbers php Newsletter Script
Php Jabbers php Shopping Cart
Php Jabbers product Comparison Script
Php Jabbers property Listing Script
Php Jabbers rental Property Booking Calendar
Php Jabbers restaurant Booking System
Php Jabbers service Booking Script
Php Jabbers shuttle Booking Software
Php Jabbers taxi Booking Script
Php Jabbers ticket Support Script
Php Jabbers time Slots Booking Calendar
Php Jabbers travel Tours Script
Php Jabbers vacation Rental Script
Php Jabbers yacht Listing Script
Weaknesses CWE-352
CPEs cpe:2.3:a:php_jabbers:appointment_scheduler:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:auto_classifieds_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:availability_booking_calendar:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:availability_calendar:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:bus_reservation_system:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:business_directory_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:car_park_booking_system:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:car_rental_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:cinema_booking_system:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:cleaning_business_software:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:equipment_rental_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:event_booking_calendar:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:event_ticketing_system:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:food_delivery_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:hotel_booking_system:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:job_listing_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:limo_booking_software:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:meeting_room_booking_system:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:member_directory_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:member_login_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:php_event_calendar:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:php_newsletter_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:php_shopping_cart:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:product_comparison_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:property_listing_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:rental_property_booking_calendar:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:restaurant_booking_system:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:service_booking_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:shuttle_booking_software:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:taxi_booking_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:ticket_support_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:time_slots_booking_calendar:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:travel_tours_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:vacation_rental_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:yacht_listing_script:*:*:*:*:*:*:*:*
Vendors & Products Php Jabbers
Php Jabbers appointment Scheduler
Php Jabbers auto Classifieds Script
Php Jabbers availability Booking Calendar
Php Jabbers availability Calendar
Php Jabbers bus Reservation System
Php Jabbers business Directory Script
Php Jabbers car Park Booking System
Php Jabbers car Rental Script
Php Jabbers cinema Booking System
Php Jabbers cleaning Business Software
Php Jabbers equipment Rental Script
Php Jabbers event Booking Calendar
Php Jabbers event Ticketing System
Php Jabbers food Delivery Script
Php Jabbers hotel Booking System
Php Jabbers job Listing Script
Php Jabbers limo Booking Software
Php Jabbers meeting Room Booking System
Php Jabbers member Directory Script
Php Jabbers member Login Script
Php Jabbers php Event Calendar
Php Jabbers php Newsletter Script
Php Jabbers php Shopping Cart
Php Jabbers product Comparison Script
Php Jabbers property Listing Script
Php Jabbers rental Property Booking Calendar
Php Jabbers restaurant Booking System
Php Jabbers service Booking Script
Php Jabbers shuttle Booking Software
Php Jabbers taxi Booking Script
Php Jabbers ticket Support Script
Php Jabbers time Slots Booking Calendar
Php Jabbers travel Tours Script
Php Jabbers vacation Rental Script
Php Jabbers yacht Listing Script
References
Metrics cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

Php Jabbers Appointment Scheduler Auto Classifieds Script Availability Booking Calendar Availability Calendar Bus Reservation System Business Directory Script Car Park Booking System Car Rental Script Cinema Booking System Cleaning Business Software Equipment Rental Script Event Booking Calendar Event Ticketing System Food Delivery Script Hotel Booking System Job Listing Script Limo Booking Software Meeting Room Booking System Member Directory Script Member Login Script Php Event Calendar Php Newsletter Script Php Shopping Cart Product Comparison Script Property Listing Script Rental Property Booking Calendar Restaurant Booking System Service Booking Script Shuttle Booking Software Taxi Booking Script Ticket Support Script Time Slots Booking Calendar Travel Tours Script Vacation Rental Script Yacht Listing Script
cve-icon MITRE

Status: PUBLISHED

Assigner: CERT-PL

Published:

Updated: 2026-07-31T11:40:44.495Z

Reserved: 2025-12-09T19:10:43.240Z

Link: CVE-2025-67651

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses