Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
GfiHelpdesk

5 matches found

cve
cve•added 2026/04/20 5:30 p.m.•20 views

CVE-2026-23758

GFI HelpDesk prior to 4.99.9 is affected by a stored XSS in the ticket subject via the editsubject POST parameter. The issue arises from insufficient sanitization in Controller_Ticket.EditSubmit(), which bypasses the incomplete SanitizeForXSS() method, permitting an authenticated staff member to ...

6.4CVSS5.9AI score0.00153EPSS
cve
cve•added 2026/04/20 5:27 p.m.•18 views

CVE-2026-23757

GFI HelpDesk

5.4CVSS5.7AI score0.00141EPSS
cve
cve•added 2026/04/20 5:33 p.m.•17 views

CVE-2026-23752

CVE-2026-23752 affects GFI HelpDesk prior to 4.99.9. The vulnerability is a stored XSS in the template group creation/editing flow, exploitable via the companyname POST parameter without HTML sanitization. When an authenticated administrator views the Templates > Groups page, the injected scri...

4.8CVSS5.8AI score0.00151EPSS
cve
cve•added 2026/04/20 5:33 p.m.•12 views

CVE-2026-23753

GFI HelpDesk

4.8CVSS5.7AI score0.00151EPSS
cve
cve•added 2026/04/20 5:30 p.m.•12 views

CVE-2026-23756

GFI HelpDesk

5.4CVSS5.7AI score0.00141EPSS