The vulnerability identified as CVE-2025-67651 affects multiple PHP Jabbers scripts and stems from the absence of CSRF protections such as tokens or SameSite cookie attributes. This enables attackers to craft unauthorized requests that execute in the context of an authenticated user session, potentially leading to unauthorized administrative actions like adding new admin accounts. The vulnerability is classified under CWE-352 (Cross-Site Request Forgery). According to the provided data, fixed versions exist, though specific version numbers are not detailed.

Exploitation of this vulnerability can result in unauthorized administrative actions within affected PHP Jabbers scripts, including the creation of new admin accounts. This compromises the integrity and security of the affected systems by allowing attackers to escalate privileges without proper authorization.

The vulnerability has been fixed in updated versions of the affected PHP Jabbers scripts. Users should apply these official patches or upgrades as specified by the vendor. Since no specific patch links or version details are provided, users must consult the vendor's advisory or product update channels to obtain and apply the fixes. No additional mitigations are indicated in the provided data.