Lucene search
+L

3950 matches found

Vulnrichment
Vulnrichment
•added 2024/11/09 9:24 a.m.•9 views

CVE-2024-51778 WordPress Satisfaction Reports from Help Scout plugin <= 2.0.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tevya Satisfaction Reports from Help Scout happiness-reports-for-help-scout allows Reflected XSS.This issue affects Satisfaction Reports from Help Scout: from n/a through = 2.0.3...

7.1CVSS7.2AI score0.0027EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/09 9:24 a.m.•34 views

CVE-2024-51778 WordPress Satisfaction Reports from Help Scout plugin <= 2.0.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tevya Satisfaction Reports from Help Scout happiness-reports-for-help-scout allows Reflected XSS.This issue affects Satisfaction Reports from Help Scout: from n/a through = 2.0.3...

7.1CVSS0.0027EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/09 9:24 a.m.•74 views

CVE-2024-51778

CVE-2024-51778 is a reflected XSS in the Satisfaction Reports from Help Scout WordPress plugin (happiness-reports-for-help-scout). The issue arises from improper input neutralization during web page generation, affecting the plugin up to version 2.0.3 (exact affected range listed as n/a through 2...

7.1CVSS7.2AI score0.0027EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/09 12:00 a.m.•18 views

PT-2024-34815

Name of the Vulnerable Software and Affected Versions JS Help Desk – Best Help Desk & Support Plugin versions n/a through 2.8.7 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS, whic...

5.9CVSS5.4AI score0.0026EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/09 12:00 a.m.•0 views

CVE-2024-51778: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tevya Satisfaction Reports from Help Scout happiness-reports-for-help-scout allows Reflected XSS.This issue affects Satisfaction Reports from Help Scout: from n/a through = 2.0.3...

7.1CVSS5.8AI score0.0027EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/09 12:00 a.m.•1 views

CVE-2024-51670: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JoomSky JS Help Desk js-support-ticket allows Stored XSS.This issue affects JS Help Desk: from n/a through = 2.8.7...

5.9CVSS5.8AI score0.0026EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/11/08 4:30 p.m.•14 views

WordPress Assist24 Help Desk plugin <= 20150401.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Assist24 Help Desk versions = 20150401.2...

6.5CVSS6.1AI score0.00297EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/11/08 12:00 a.m.•22 views

WordPress Assist24 Help Desk Plugin <= 20150401.2 is vulnerable to Cross Site Scripting (XSS)

Software Assist24 Help Desk Type Plugin Vulnerable versions = 20150401.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51910 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID fd4bafd1fbc2 Credits SOPROBRO Required privilege...

6.5CVSS6.5AI score0.00297EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2024/11/08 12:00 a.m.•16 views

WordPress Beacon For Help Scout Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

Software Beacon For Help Scout Type Plugin Vulnerable versions = 1.3.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51828 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 28de7e29c4c2 Credits SOPROBRO Required privilege...

6.5CVSS6.5AI score0.00377EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2024/11/04 10:16 a.m.•12 views

WordPress Satisfaction Reports from Help Scout plugin <= 2.0.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by thiennv Patchstack Alliance in WordPress Plugin Satisfaction Reports from Help Scout versions = 2.0.3...

7.1CVSS6.1AI score0.0027EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/11/04 12:00 a.m.•19 views

WordPress Satisfaction Reports from Help Scout Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)

Software Satisfaction Reports from Help Scout Type Plugin Vulnerable versions = 2.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51778 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID cf60abd46d51 Credits thiennv...

7.1CVSS6.5AI score0.0027EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/11/01 3:15 p.m.•17 views

CVE-2024-43274

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.6...

9.8CVSS5.8AI score0.00442EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2024/11/01 3:15 p.m.•6 views

CVE-2024-43274

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.6...

9.8CVSS5.2AI score0.00442EPSS
SaveExploits0References2
NVD
NVD
•added 2024/11/01 3:15 p.m.•43 views

CVE-2024-43274

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.6...

9.8CVSS0.00442EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/01 2:17 p.m.•12 views

CVE-2024-43274 WordPress JS Help Desk – The Ultimate Help Desk plugin <= 2.8.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.6...

5.8CVSS7.1AI score0.00442EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/01 2:17 p.m.•45 views

CVE-2024-43274 WordPress JS Help Desk – The Ultimate Help Desk plugin <= 2.8.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.6...

5.8CVSS0.00442EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/01 2:17 p.m.•56 views

CVE-2024-43274

The CVE-2024-43274 entry affects the WordPress plugin “JS Help Desk – Best Help Desk & Support Plugin” (versions up to 2.8.6). Root cause: missing authorization leads to Broken Access Control, allowing unauthenticated actors to access functionality not properly constrained by ACLs. Impact is desc...

9.8CVSS5.7AI score0.00442EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2024/11/01 12:05 p.m.•14 views

WordPress JS Help Desk plugin <= 2.8.7 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by casol Patchstack Alliance in WordPress Plugin JS Help Desk versions = 2.8.7...

5.9CVSS5.8AI score0.0026EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/01 12:00 a.m.•0 views

CVE-2024-43274: Missing Authorization

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.6...

9.8CVSS5.8AI score0.00442EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/11/01 12:00 a.m.•23 views

WordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.8.7 is vulnerable to Cross Site Scripting (XSS)

Software JS Help Desk – Best Help Desk & Support Plugin Type Plugin Vulnerable versions = 2.8.7 Fixed in 2.8.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51670 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID ac0a5665f555 Credits casol...

5.9CVSS6.5AI score0.0026EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder