Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 10:47 a.m.•24 views

CVE-2022-31398

A cross-site scripting XSS vulnerability in /staff/tools/custom-fields of Helpdeskz v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email name field...

4.8CVSS5.7AI score0.00561EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 10:47 a.m.•20 views

CVE-2022-31400

A cross-site scripting XSS vulnerability in /staff/setup/email-addresses of Helpdeskz v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email name field...

4.8CVSS5.7AI score0.00561EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2022-52910

Malicious code in bioql PyPI...

4.8CVSS5.2AI score0.00561EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/15 12:00 a.m.•84 views

HelpDeskZ cross-site scripting vulnerability (CNVD-2022-59046)

HelpDeskZ is a PHP-based software that allows you to manage your site's support using a web-based support ticket system. Provides quality support. A cross-site scripting vulnerability exists in HelpDeskZ version v2.0.2, which stems from a lack of parameter filtering and escaping in...

4.8CVSS5AI score0.00561EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/06/13 1:15 p.m.•11 views

CVE-2022-31398

A cross-site scripting XSS vulnerability in /staff/tools/custom-fields of Helpdeskz v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email name field...

4.8CVSS5.9AI score0.00561EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/06/13 1:15 p.m.•17 views

CVE-2022-31400

A cross-site scripting XSS vulnerability in /staff/setup/email-addresses of Helpdeskz v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email name field...

4.8CVSS5.9AI score0.00561EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/13 12:00 a.m.•5 views

CVE-2022-31398: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in /staff/tools/custom-fields of Helpdeskz v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email name field...

4.8CVSS5.9AI score0.00561EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/13 12:00 a.m.•5 views

CVE-2022-31400: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in /staff/setup/email-addresses of Helpdeskz v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email name field...

4.8CVSS5.9AI score0.00561EPSS
SaveExploits1References2
Rows per page
Query Builder