CVE-2004-1412

Kayako eSupport 2.x (index.php) is vulnerable to cross-site scripting via the searchm parameter. This XSS allows remote attackers to inject arbitrary web script or HTML. The NVD entry lists a CVSS v2 base score of 4.3 (Medium) with network attack vector, no authentication, and partial integrity i...