Phpjabbers PHP Poll Script vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Phpjabbers PHP Poll Script: 2 record(s), with affected versions and fixes.
CVE-2026-46594
Medium · 5.1
CWE-79 Jul 31, 2026
Reflected XSS in PHP Poll Script
A reflected cross-site scripting (XSS) vulnerability has been identified in the PHP Jabbers - PHP Poll Script. A malicious attacker can craft a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's browser.
This issue was fixed in version 4.1.
CVE-2026-46593
High · 8.6
CWE-89 Jul 31, 2026
Authenticated SQL Injection in PHP Poll Script
A SQL injection vulnerability has been identified in the PHP Jabbers - PHP Poll Script. Improper neutralization of input provided by user to pjAdminPolls.controller.php endpoint allows an authenticated attacker to perform SQL Injection attacks.
This issue was fixed in version 4.1.