CVE-2023-51298

MEDIUM 4.7CVE-2023-51298 · Published 19/02/2025 · updated 17/06/2026

In short

CVE-2023-51298 is a MEDIUM (CVSS 4.7) vulnerability affecting event booking calendar (phpjabbers).
Chance of exploitation in the next 30 days (EPSS): 0.41%, higher than 35.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
event booking calendar phpjabbers	`= 4.0`	No fix yet

Description

PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file.

References

packetstormsecurity.com/files/176487/PHPJabbers-Event-Booking-Calendar-4.0-CSV-Injection.html · Exploit
phpjabbers.com/event-booking-calendar · Product

More vulnerabilities in event booking calendar

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

event booking calendar

phpjabbers

= 4.0

No fix yet

More vulnerabilities in event booking calendar

See all →