XSS in PHP Jabbers Poll Script
CVE-2026-46594
A reflected cross-site scripting (XSS) vulnerability has been identified in the PHP Jabbers - PHP Poll Script. A malicious attacker can craft a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's browser. This issue was fixed in version 4.1.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.003 (28.0th percentile) — read the EPSS interpretation.
Affected products
- Php Jabbers Poll Script — versions 0
Weakness classification (CWE)
References
- cvd@cert.pl (third-party-advisory)
- cvd@cert.pl (product)