Cross-Site Scripting Vulnerability in Helpdeskz by Helpdeskz Team
CVE-2022-31398
4.8MEDIUM
Summary
A cross-site scripting (XSS) vulnerability exists in the Helpdeskz software, specifically in the /staff/tools/custom-fields feature within version 2.0.2. This vulnerability allows attackers to inject malicious web scripts or HTML into the email name field, potentially leading to unauthorized actions executed in the context of the victim's browser. This exploit can compromise the security of users by exposing sensitive information and executing unwanted scripts.
References
CVSS V3.1
Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved