CVE-2013-2504

CVE-2013-2504 is a documented XSS in Matrix42 Service Desk (Service Store 5.3 SP3 / 5.33.946.0). The vulnerability occurs in SPS/Portal/default.aspx and allows remote attackers to inject arbitrary web script or HTML via the query string. Exploitation is reported via public advisories and an explo...