Helpdesk Security Vulnerabilities and Issues — Helpdesk CVE List

GfiHelpdesk

5 matches found

CVE•added 2026/04/20 5:27 p.m.•41 views

CVE-2026-23757

GFI HelpDesk

5.4CVSS5.7AI score0.00141EPSS

Save

CVE•added 2026/04/20 5:33 p.m.•32 views

CVE-2026-23753

GFI HelpDesk

4.8CVSS5.7AI score0.00151EPSS

Save

CVE•added 2026/04/20 5:30 p.m.•27 views

CVE-2026-23758

GFI HelpDesk prior to 4.99.9 is affected by a stored XSS in the ticket subject via the editsubject POST parameter. The issue arises from insufficient sanitization in Controller_Ticket.EditSubmit(), which bypasses the incomplete SanitizeForXSS() method, permitting an authenticated staff member to ...

6.4CVSS5.9AI score0.00153EPSS

Save

CVE•added 2026/04/20 5:33 p.m.•26 views

CVE-2026-23752

CVE-2026-23752 affects GFI HelpDesk prior to 4.99.9. The vulnerability is a stored XSS in the template group creation/editing flow, exploitable via the companyname POST parameter without HTML sanitization. When an authenticated administrator views the Templates > Groups page, the injected scri...

4.8CVSS5.8AI score0.00151EPSS

Save

CVE•added 2026/04/20 5:30 p.m.•18 views

CVE-2026-23756

GFI HelpDesk

5.4CVSS5.7AI score0.00141EPSS

Save