CVE-2026-46594 — Vulnerability intelligence

PHP Jabbers — PHP Poll Script

Published: 2026-07-31T11:40:57.749Z

CVSS

5.1

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

A reflected cross-site scripting (XSS) vulnerability has been identified in the PHP Jabbers - PHP Poll Script. A malicious attacker can craft a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's browser. This issue was fixed in version 4.1.

Sources

• CVE-2026-46594
• Original advisory
• Original advisory
• CVE-2026-46594