What is CVE-2026-46594?
CVE-2026-46594 is a reflected cross-site scripting (XSS) vulnerability in PHP Jabbers PHP Poll Script. A malicious actor can execute arbitrary JavaScript in a victim's browser via a specially crafted URL. Upgrading to version 4.1 resolves the issue.
Azərbaycanca: CVE-2026-46594, PHP Jabbers PHP Poll Script-də aşkarlanmış reflected cross-site scripting (XSS) zəifliyidir. Təcavüzkar xüsusi hazırlanmış URL vasitəsilə istifadəçinin brauzerində ixtiyari JavaScript kodu icra edə bilər. Skripti 4.1 versiyasına yeniləmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-79
FAQ2
What product does CVE-2026-46594 affect and how is it exploited?
CVE-2026-46594 is a reflected cross-site scripting (XSS) vulnerability in PHP Jabbers PHP Poll Script. A malicious actor can execute arbitrary JavaScript in a victim's browser via a specially crafted URL.
How can I mitigate the CVE-2026-46594 vulnerability?
To mitigate the vulnerability, it is recommended to upgrade PHP Jabbers PHP Poll Script to version 4.1.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.