CVE-2021-36695

Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in Deskpro 2021.1.7 contains a cross-site scripting XSS vulnerability in the download file feature on a manager profile due to lack of input validation...

CVE-2021-36695

Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in Deskpro 2021.1.7 contains a cross-site scripting XSS vulnerability in the download file feature on a manager profile due to lack of input validation...

Cross site scripting

Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in Deskpro 2021.1.7 contains a cross-site scripting XSS vulnerability in the download file feature on a manager profile due to lack of input validation...

CVE-2021-36695

Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in Deskpro 2021.1.7 contains a cross-site scripting XSS vulnerability in the download file feature on a manager profile due to lack of input validation...

CVE-2021-36695

Summary: Deskpro cloud and on‑premise versions 2021.1.6 are affected by a cross‑site scripting (XSS) vulnerability in the download file feature on a manager profile, caused by lack of input validation; this is fixed in 2021.1.7. Affected product/versions: Deskpro 2021.1.6 (cloud and on‑premise). ...

Deskpro 跨站脚本漏洞

Deskpro is a suite of helpdesk software from Deskpro UK. The software includes a customer relationship management component, among other things, and provides features such as email, live chat, and voice. A security vulnerability exists in Deskpro cloud and on-premise Deskpro versions 2021.1.6 and...

CVE-2021-36696

Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in Deskpro 2021.1.7 contains a cross-site scripting XSS vulnerability in social media links on a user profile due to lack of input validation...

CVE-2021-36696

Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in Deskpro 2021.1.7 contains a cross-site scripting XSS vulnerability in social media links on a user profile due to lack of input validation...

CVE-2021-36696

Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in Deskpro 2021.1.7 contains a cross-site scripting XSS vulnerability in social media links on a user profile due to lack of input validation...

Cross site scripting

Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in Deskpro 2021.1.7 contains a cross-site scripting XSS vulnerability in social media links on a user profile due to lack of input validation...

CVE-2021-36696

Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in Deskpro 2021.1.7 contains a cross-site scripting XSS vulnerability in social media links on a user profile due to lack of input validation...

CVE-2021-36696

CVE-2021-36696 affects Deskpro cloud and on-premise Deskpro 2021.1.6; a cross-site scripting (XSS) vulnerability arises from lack of input validation for social media links in user profiles. The root cause is input validation failure in profile social links, allowing injection of JavaScript into ...

Deskpro 跨站脚本漏洞

Deskpro is a suite of helpdesk software from Deskpro UK. The software includes a customer relationship management component, among other things, and offers features such as e-mail, live chat, and voice. A cross-site scripting vulnerability exists in Deskpro cloud and on-premise Deskpro in version...

CVE-2020-28722

Deskpro Cloud Platform and on-premise 2020.2.3.48207 from 2020-07-30 contains a cross-site scripting XSS vulnerability that can lead to an account takeover via custom email templates...

CVE-2020-28722

Deskpro Cloud Platform and on-premise 2020.2.3.48207 from 2020-07-30 contains a cross-site scripting XSS vulnerability that can lead to an account takeover via custom email templates...

Cross site scripting

Deskpro Cloud Platform and on-premise 2020.2.3.48207 from 2020-07-30 contains a cross-site scripting XSS vulnerability that can lead to an account takeover via custom email templates...

CVE-2020-28722

Deskpro Cloud Platform and on-premise 2020.2.3.48207 from 2020-07-30 contains a cross-site scripting XSS vulnerability that can lead to an account takeover via custom email templates...

CVE-2020-28722

CVE-2020-28722 affects Deskpro Cloud Platform and on‑premise Deskpro 2020.2.3.48207. The vulnerability is a cross-site scripting (XSS) flaw in custom email templates that can lead to an account takeover. The provided connected documents confirm the product, version, and impact, but do not include...

Deskpro 跨站脚本漏洞

Deskpro is a suite of helpdesk software from Deskpro UK. The software includes, among other things, a customer relationship management component that provides features such as email, live chat, and voice. A cross-site scripting vulnerability exists in Deskpro Cloud Platform. The vulnerability cou...

@deskpro/apps-installer (>=0.3.1 <=0.4.5), @deskproapps/deskproapps-sdk-react (>=0.1.3 <=1.0.0-alpha) +19 more potentially affected by CVE-2020-7742 via simpl-schema (>=0.0.1 <=0.5.0)

simpl-schema NPM version =0.0.1, =0.3.1, =0.1.3, =0.0.1, =1.0.11, =0.0.1, =0.7.5, =0.0.1, =0.4.0, =0.1.0, =0.1.0, =1.0.4, =0.1.0, =0.1.0, =0.0.9, =0.0.14 and more Source cves: CVE-2020-7742 Source advisory: OSV:GHSA-9MX2-PRFP-8HQP...