CVE-2012-4872

Cross-site scripting XSS vulnerability in Tickets/Submit in Kayako Fusion before 4.40.985 allows remote attackers to inject arbitrary web script or HTML via certain vectors, possibly a crafted ticket description...

CVE-2012-4872

CVE-2012-4872 is a cross-site scripting (XSS) vulnerability in Kayako Fusion, affecting the Tickets/Submit path prior to version 4.40.985. The issue allows remote attackers to inject arbitrary script/HTML via vectors such as a crafted ticket description. CVSS 2.0 base score 4.3 (Medium). Referenc...