CVE-2025-67651mediumCWE-352

CVE-2025-67651: fallo de gravedad media en PHP Jabbers Appointment Scheduler

CSRF in PHP Jabbers scripts

Publicada el

Seguir esta CVE+ Monitorear Bus Reservation System+ Monitorear Availability Booking Calendar

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.9epss 0.2%
A Cross-Site Request Forgery (CSRF) vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker to send unauthorized requests in the context of an authenticated user, leading to unauthorized administrative actions, such as creating new admin accounts. This issue was fixed in the versions specified in the affected products list.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Productos afectados
PHP Jabbers · Appointment SchedulerPHP Jabbers · Auto Classifieds ScriptPHP Jabbers · Availability Booking CalendarPHP Jabbers · Availability CalendarPHP Jabbers · Business Directory ScriptPHP Jabbers · Bus Reservation SystemPHP Jabbers · Car Park Booking SystemPHP Jabbers · Car Rental ScriptPHP Jabbers · Cinema Booking SystemPHP Jabbers · Cleaning Business SoftwarePHP Jabbers · Equipment Rental ScriptPHP Jabbers · Event Booking CalendarPHP Jabbers · Event Ticketing SystemPHP Jabbers · Food Delivery ScriptPHP Jabbers · Hotel Booking SystemPHP Jabbers · Job Listing ScriptPHP Jabbers · Limo Booking SoftwarePHP Jabbers · Meeting Room Booking SystemPHP Jabbers · Member Directory ScriptPHP Jabbers · Member Login ScriptPHP Jabbers · PHP Event CalendarPHP Jabbers · PHP Newsletter ScriptPHP Jabbers · PHP Shopping CartPHP Jabbers · Product Comparison ScriptPHP Jabbers · Property Listing ScriptPHP Jabbers · Rental Property Booking CalendarPHP Jabbers · Restaurant Booking SystemPHP Jabbers · Service Booking ScriptPHP Jabbers · Shuttle Booking SoftwarePHP Jabbers · Taxi Booking ScriptPHP Jabbers · Ticket Support ScriptPHP Jabbers · Time Slots Booking CalendarPHP Jabbers · Travel Tours ScriptPHP Jabbers · Vacation Rental ScriptPHP Jabbers · Yacht Listing Script
CVEs relacionadas — PHP Jabbers Appointment Scheduler

En el mismo producto, de las más peligrosas a las menos.

CVE-2023-4110LOWPHP Jabbers Availability Booking Calendar index.php cross site scriptingEPSS 1.8%CVE-2025-67650HIGHAuthenticated SQL Injection in PHP Jabbers scriptsEPSS 0.4%