PT-2025-51965 · Phpjabbers · Phpjabbers Simple Cms

Published 2025-12-17 · Updated 2025-12-20 · CVE-2023-53927

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PHPJabbers Simple CMS version 5.0

Description The software contains a stored cross-site scripting issue. Authenticated attackers can inject malicious scripts through section name parameters. Attackers can create sections with embedded JavaScript payloads that will execute when administrators view the sections, potentially enabling client-side code execution. The vulnerable parameter is the section name.

Recommendations Apply any available updates to address the issue. As a temporary workaround, sanitize all user-supplied input for the section name parameter to prevent the injection of malicious scripts.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-53927

Affected Products

Phpjabbers Simple Cms

References · 8

• 🔥 https://exploit-db.com/exploits/51415 · Exploit
• 🔥 https://vulncheck.com/advisories/phpjabbers-simple-cms-stored-cross-site-scripting-via-section-creation · Exploit
• https://osv.dev/vulnerability/CVE-2023-53927 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53927 · Security Note
• https://phpjabbers.com · Note
• https://twitter.com/CVEnew/status/2002487779343937660 · Twitter Post
• https://twitter.com/CveFindCom/status/2001437218187976819 · Twitter Post
• https://t.me/CVEtracker/40083 · Telegram Post