Get real-time updates on Telegram
P5
CVE-2026-46594: PHP Poll Script 0 to before 4.1
CVE-2026-46594. EPSS 0.00554 (percentile 0.45506), scored 22-Oct-2026.
Affected technology
PHP Poll Script · 0 to before 4.1
PHP Jabbers
Component: Not specified by the source
Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · Active user interaction
What an attacker can do
A malicious attacker can craft a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's browser. Vendor/CNA’s CVSS 4.0 assessment (base score 5.1/10) rates confidentiality, integrity and availability impact as none.
- CWE
- CWE-79
- CCR priority
- 0.1 /100 (P5)
- EPSS
- 0.00554 · percentile 0.45506 · 2026-10-22
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-24 01:40:49.068977+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-46594.html