CVE-2026-46594

Vulnerability Description

A reflected cross-site scripting (XSS) vulnerability has been identified in the PHP Jabbers - PHP Poll Script. A malicious attacker can craft a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's browser.
This issue was fixed in version 4.1.

Vulnerability Details

Published Date

July 31, 2026

Last Modified

July 31, 2026

CWE ID

CWE-79

Source

NVD

Vendor

PHP Jabbers

Product

PHP Poll Script

External References

https://cert.pl/en/posts/2026/07/CVE-2025-67649/
https://www.phpjabbers.com/php-poll-script/

CVE-2026-46594

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment