Description
A reflected cross-site scripting (XSS) vulnerability has been identified in the PHP Jabbers - PHP Poll Script. A malicious attacker can craft a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's browser.
This issue was fixed in version 4.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PHP Jabbers | PHP Poll Script | < 4.1 | 4.1 |
References
- https://cert.pl/en/posts/2026/07/CVE-2025-67649/ third-party-advisory
- https://www.phpjabbers.com/php-poll-script/ product