Cross site scripting

2021-10-0116:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

43.0%

JSON

Cross-site scripting (XSS) vulnerability in dompdf/dompdf/www/demo.php infaveo-helpdesk v1.11.0 and below allow remote attackers to inject arbitrary web script or HTML via the $_SERVER[“PHP_SELF”] parameter.

CPENameOperatorVersion
faveole1.11.0

CPE	Name	Operator	Version
	faveo	le	1.11.0

References

github.com/ladybirdweb/faveo-helpdesk

github.com/ladybirdweb/faveo-helpdesk/issues/5423

0.001 Low

EPSS

Percentile

43.0%

JSON

Related for PRION:CVE-2021-40925