← Back

Make An Offer Widget

make_an_offer_widget

Vendor: Phpjabbers • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-40767
1Phpjabbers
1Make An Offer Widget
Jun 17, 2026
Aug 28, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
User enumeration is found in in PHPJabbers Make an Offer Widget v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling...Show more
User enumeration is found in in PHPJabbers Make an Offer Widget v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.Show less
CVE-2023-40752
1Phpjabbers
1Make An Offer Widget
Jun 17, 2026
Aug 28, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Make an Offer Widget v1.0.