CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

Cvelist•added 2026/04/20 5:30 p.m.•46 views

CVE-2026-23756 GFI HelpDesk < 4.99.9 Stored XSS via Troubleshooter Step Subject

GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the Troubleshooter module where the subject POST parameter is not sanitized in ControllerStep.InsertSubmit and EditSubmit before being rendered by ViewStep.RenderViewSteps. An authenticated staff member can inject...

5.4CVSS0.00141EPSS

SaveExploits0References2

CVE•added 2026/04/20 5:30 p.m.•31 views

CVE-2026-23756

GFI HelpDesk

5.4CVSS5.9AI score0.00141EPSS

SaveExploits0References2Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by