CVE-2009-3567

2009-10-0620:19:00

mitre

www.cve.org

5.6 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.0%

JSON

Cross-site scripting (XSS) vulnerability in modules/tickets/functions_ticketsui.php in Kayako SupportSuite and eSupport 3.60.04 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the staff control panel, a different vector than CVE-2007-1145.