Lucene search
+L

3 matches found

Cvelist
Cvelist
•added 2024/12/16 10:24 p.m.•32 views

CVE-2024-12443 CRM Perks – WordPress HelpDesk Integration – Zendesk, Freshdesk, HelpScout <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

The CRM Perks – WordPress HelpDesk Integration – Zendesk, Freshdesk, HelpScout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'crm-perks-tickets' shortcode in all versions up to, and including, 1.1.6 due to insufficient input sanitization and output escaping on...

6.4CVSS0.00346EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/12/16 10:24 p.m.•13 views

CVE-2024-12443 CRM Perks – WordPress HelpDesk Integration – Zendesk, Freshdesk, HelpScout <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

The CRM Perks – WordPress HelpDesk Integration – Zendesk, Freshdesk, HelpScout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'crm-perks-tickets' shortcode in all versions up to, and including, 1.1.6 due to insufficient input sanitization and output escaping on...

6.4CVSS5.8AI score0.00346EPSS
SaveExploits0References4
CVE
CVE
•added 2024/12/16 10:24 p.m.•61 views

CVE-2024-12443

CVE-2024-12443 affects the CRM Perks – WordPress HelpDesk Integration plugin for WordPress. It is a Stored XSS vulnerability in the crm-perks-tickets shortcode present in all versions up to 1.1.6, caused by insufficient input sanitization and output escaping on user-supplied attributes. Exploitat...

6.4CVSS5.7AI score0.00346EPSS
SaveExploits0References4
Rows per page
Query Builder