User enumeration is found in PHPJabbers Event Booking Calendar v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
| Software | From | Fixed in |
|---|---|---|
| phpjabbers / event_booking_calendar | 4.0 | 4.0.x |