3 matches found
CVE-2022-31400
A cross-site scripting XSS vulnerability in /staff/setup/email-addresses of Helpdeskz v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email name field...
HelpDeskZ Cross-Site Script Vulnerabilities
HelpDeskZ is a PHP-based software that allows you to manage your site's support using a web-based support ticket system. Provides quality support. A cross-site scripting vulnerability exists in HelpDeskZ version v2.0.2, which stems from a lack of parameter filtering and escaping in...
PT-2022-20731
Name of the Vulnerable Software and Affected Versions Helpdeskz version 2.0.2 Description A cross-site scripting XSS issue exists in the /staff/setup/email-addresses endpoint of Helpdeskz, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email na...