Lucene search
+L

2507 matches found

NVD
NVD
added 2024/11/09 1:15 p.m.18 views

CVE-2024-51670

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JoomSky JS Help Desk js-support-ticket allows Stored XSS.This issue affects JS Help Desk: from n/a through = 2.8.7...

5.9CVSS0.0026EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/09 1:15 p.m.7 views

CVE-2024-51670

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Stored XSS.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.7...

4.8CVSS5.8AI score0.0026EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/09 1:06 p.m.32 views

CVE-2024-51670 WordPress JS Help Desk plugin <= 2.8.7 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JoomSky JS Help Desk js-support-ticket allows Stored XSS.This issue affects JS Help Desk: from n/a through = 2.8.7...

5.9CVSS0.0026EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/09 1:06 p.m.67 views

CVE-2024-51670

CVE-2024-51670 – JS Help Desk WordPress Plugin : Affected plugin versions are

5.9CVSS5.9AI score0.0026EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/09 1:06 p.m.15 views

CVE-2024-51670 WordPress JS Help Desk plugin <= 2.8.7 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JoomSky JS Help Desk js-support-ticket allows Stored XSS.This issue affects JS Help Desk: from n/a through = 2.8.7...

5.9CVSS5.9AI score0.0026EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/09 12:00 a.m.12 views

PT-2024-34815

Name of the Vulnerable Software and Affected Versions JS Help Desk – Best Help Desk & Support Plugin versions n/a through 2.8.7 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS, whic...

5.9CVSS5.4AI score0.0026EPSS
SaveExploits0References7
Patchstack
Patchstack
added 2024/11/08 4:30 p.m.7 views

WordPress Assist24 Help Desk plugin <= 20150401.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Assist24 Help Desk versions = 20150401.2...

6.5CVSS6.1AI score0.00285EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/11/08 12:00 a.m.14 views

WordPress Assist24 Help Desk Plugin <= 20150401.2 is vulnerable to Cross Site Scripting (XSS)

Software Assist24 Help Desk Type Plugin Vulnerable versions = 20150401.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51910 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID fd4bafd1fbc2 Credits SOPROBRO Required privilege...

6.5CVSS6.5AI score0.00285EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/11/06 5:15 p.m.27 views

CVE-2024-20534

A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting XSS attacks against users. This vulnerabilit...

4.8CVSS0.00278EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/06 5:15 p.m.50 views

CVE-2024-20533

A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting XSS attacks against users. This vulnerabilit...

4.8CVSS0.00278EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/06 4:31 p.m.27 views

CVE-2024-20534 Cisco IP Phone 6800, 7800, 8800, and 9800 Series with Multiplatform Firmware Stored Cross-Site Scripting Vulnerability

A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting XSS attacks against users. This vulnerabilit...

4.8CVSS0.00278EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/06 4:31 p.m.13 views

CVE-2024-20534 Cisco IP Phone 6800, 7800, 8800, and 9800 Series with Multiplatform Firmware Stored Cross-Site Scripting Vulnerability

A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting XSS attacks against users. This vulnerabilit...

4.8CVSS6AI score0.00278EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/06 4:31 p.m.57 views

CVE-2024-20534

CVE-2024-20534 affects Cisco Desk Phone 9800 Series, Cisco IP Phone 6800/7800/8800 Series, and Cisco Video Phone 8875 with Multiplatform Firmware. The issue is stored cross-site scripting (XSS) in the device web UI caused by improper validation of user-supplied input. An authenticated, remote att...

4.8CVSS5AI score0.00278EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2024/11/06 4:31 p.m.63 views

CVE-2024-20533

Cisco CVE-2024-20533 affects the web UI of Cisco Desk Phone 9800 Series, IP Phones 6800/7800/8800, and Video Phone 8875 with Multiplatform Firmware. The issue is stored XSS arising from improper validation of user input in the web UI, allowing an authenticated remote attacker to inject script via...

4.8CVSS5AI score0.00278EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2024/11/06 4:29 p.m.69 views

CVE-2024-20445

CVE-2024-20445 affects Cisco Desk Phone 9800 Series, Cisco IP Phone 7800/8800 Series, and Cisco Video Phone 8875. The issue is improper storage of sensitive information in the web UI for SIP-based phone loads, allowing an unauthenticated, remote attacker to access sensitive data (including call r...

5.3CVSS5.2AI score0.00441EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/06 12:00 a.m.16 views

PT-2024-8290

Name of the Vulnerable Software and Affected Versions Cisco IP Phone 6800 versions affected versions not specified Cisco IP Phone 7800 versions affected versions not specified Cisco IP Phone 8800 versions affected versions not specified Cisco Video Phone 8875 versions affected versions not...

5.5CVSS5.9AI score0.00278EPSS
SaveExploits0References7
OSV
OSV
added 2024/11/01 3:15 p.m.13 views

CVE-2024-43274

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.6...

9.8CVSS5.8AI score0.00442EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2024/11/01 3:15 p.m.5 views

CVE-2024-43274

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.6...

9.8CVSS5.2AI score0.00442EPSS
SaveExploits0References2
NVD
NVD
added 2024/11/01 3:15 p.m.40 views

CVE-2024-43274

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.6...

9.8CVSS0.00442EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/01 2:17 p.m.12 views

CVE-2024-43274 WordPress JS Help Desk – The Ultimate Help Desk plugin <= 2.8.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.6...

5.8CVSS7.1AI score0.00442EPSS
SaveExploits0References1
Rows per page
Query Builder