Lucene search
+L

5 matches found

NVD
NVD
•added 2026/02/03 6:16 p.m.•15 views

CVE-2019-25263

Zendesk SweetHawk Survey 1.6 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts through support ticket submissions. Attackers can insert XSS payloads like script tags into ticket text that automatically execute when survey pages are loaded b...

6.4CVSS0.00254EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/02/03 4:52 p.m.•53 views

CVE-2019-25263 Zendesk App SweetHawk Survey 1.6 - Persistent Cross-Site Scripting

Zendesk SweetHawk Survey 1.6 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts through support ticket submissions. Attackers can insert XSS payloads like script tags into ticket text that automatically execute when survey pages are loaded b...

6.4CVSS0.00254EPSS
SaveExploits0References4
CVE
CVE
•added 2026/02/03 4:52 p.m.•32 views

CVE-2019-25263

Zendesk SweetHawk Survey 1.6 is affected by a persistent cross-site scripting (XSS) vulnerability. The issue allows attackers to inject malicious scripts through support ticket submissions, with payloads such as script tags that execute when survey pages are loaded by other users. Root cause: ina...

6.4CVSS5AI score0.00254EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/02/03 4:52 p.m.•7 views

CVE-2019-25263 Zendesk App SweetHawk Survey 1.6 - Persistent Cross-Site Scripting

Zendesk SweetHawk Survey 1.6 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts through support ticket submissions. Attackers can insert XSS payloads like script tags into ticket text that automatically execute when survey pages are loaded b...

6.4CVSS5AI score0.00254EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/03 12:00 a.m.•1 views

CVE-2019-25263: Improper Neutralization of Input During Web Page Generation

Zendesk SweetHawk Survey 1.6 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts through support ticket submissions. Attackers can insert XSS payloads like script tags into ticket text that automatically execute when survey pages are loaded b...

6.4CVSS5.7AI score0.00254EPSS
SaveExploits0References1
Rows per page
Query Builder