CVE-2009-3427

Cross-site scripting XSS vulnerability in Kayako SupportSuite 3.50.06 allows remote attackers to inject arbitrary web script or HTML via the subject field in a ticket...

CVE-2009-3427

The CVE-2009-3427 issue affects Kayako SupportSuite, specifically version 3.50.06, which is vulnerable to a cross-site scripting (XSS) flaw in the ticket subject field. The underlying problem is insufficient sanitization of input passed to the subject field, allowing an attacker to inject arbitra...