CVE-2026-46594 in PHP Poll Script

Sumário

de MITRE • 31/07/2026

A reflected cross-site scripting (XSS) vulnerability has been identified in the PHP Jabbers - PHP Poll Script. A malicious attacker can craft a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's browser. This issue was fixed in version 4.1.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsável: CERT-PL
• Reservar: 15/05/2026
• Divulgação: 31/07/2026
• Moderação: aceite
• Entrada: VDB-385072
• CPE: pronto
• CWE: CWE-79 (confirmado)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00000
• KEV: não
• Atividades: muito baixo
• Sector: Education

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-46594
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-46594
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-46594/