VULNERABILITY INTELLIGENCE
CVE-2026-46594
EPSS probability0.55%
CISA KEVNot currently listed
Published2026-07-31
Last modified2026-10-23
Description
A reflected cross-site scripting (XSS) vulnerability has been identified in the PHP Jabbers - PHP Poll Script. A malicious attacker can craft a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's browser. This issue was fixed in version 4.1.
Weakness classification
- cvd@cert.pl: CWE-79