@golocalinteractive/golocal-cloud-wrapper (>=0.0.101 <=1.3.28), @jatango-ds/abrazo-web (>=0.1.0 <=0.1.2) +10 more potentially affected by CVE-2025-46344 via @auth0/nextjs-auth0 (>=4.12.1 <=4.22.0)

@auth0/nextjs-auth0 NPM version =4.12.1, =0.0.101, =0.1.0, =8.2.3, =1.0.0, =2.4.0, =0.1.0, =1.5.0, =0.0.1, =0.48.0, =1.4.0 Source cves: CVE-2025-46344 Source advisory: OSV:GHSA-PJR6-JX7R-J4R6...

CVE-2020-13992

An issue was discovered in Mods for HESK 3.1.0 through 2019.1.0. A Stored XSS issue allows remote unauthenticated attackers to abuse a helpdesk user's logged in session. A user with sufficient privileges to change their login-page image must open a crafted ticket...

Cross site scripting

An issue was discovered in Mods for HESK 3.1.0 through 2019.1.0. A Stored XSS issue allows remote unauthenticated attackers to abuse a helpdesk user's logged in session. A user with sufficient privileges to change their login-page image must open a crafted ticket...

CVE-2007-5176

Multiple cross-site scripting XSS vulnerabilities in GroupLink eHelpDesk 6.2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 NADISPLAYNAME parameter in helpdesk/user/rfcreate.jsp and the 2 username and 3 LDAPError parameters in index2.jsp. NOTE: the provenance of this...