CVE-2024-46226

A stored cross-site scripting (XSS) vulnerability exists in HelpDeskZ versions prior to v2.0.2 . A remote attacker can execute arbitrary JavaScript within the administration panel by injecting a malicious payload into the file name or using the upload file function while creating a new ticket. To...