CVE-2020-35416

Multiple cross-site scripting (XSS) vulnerabilities exist in PHPJabbers Appointment Scheduler 2.3, in the index.php admin login webpage (with different request parameters), allows remote attackers to inject arbitrary web script or HTML.

• CWE-79

• http://packetstormsecurity.com/files/160502/PHPJabbers-Appointment-Scheduler-2.3-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/160600/PHPJabbers-Appointment-Scheduler-2.3-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/49281Exploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/160502/PHPJabbers-Appointment-Scheduler-2.3-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/160600/PHPJabbers-Appointment-Scheduler-2.3-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/49281Exploit, Third Party Advisory, VDB Entry

Published

Dec 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-3539A vulnerability in the web-based management interface of Cis…6.3
• CVE-2020-35391Tenda N300 F3 12.01.01.48 devices allow remote attackers to …6.5
• CVE-2020-35395XSS in the Add Expense Component of EGavilan Media Expense M…6.1
• CVE-2020-35396EGavilan Barcodes generator 1.0 is affected by: Cross Site S…6.1
• CVE-2020-35398An issue was discovered in UTI Mutual fund Android applicati…5.3
• CVE-2020-3541A vulnerability in the media engine component of Cisco Webex…4.4
• CVE-2020-35418Cross Site Scripting (XSS) in the contact page of Group Offi…5.4
• CVE-2020-35419Cross Site Scripting (XSS) in Group Office CRM 6.4.196 via t…6.1
• CVE-2020-3542A vulnerability in Cisco Webex Training could allow an authe…5.3
• CVE-2020-35427SQL injection vulnerability in PHPGurukul Employee Record Ma…9.8
• CVE-2020-3543A vulnerability in the Cisco Discovery Protocol of Cisco Vid…6.5
• CVE-2020-35430SQL Injection in com/inxedu/OS/edu/controller/letter/AdminMs…9.8