Cross-Site Scripting Vulnerability in Helpdeskz 2.0.2 by Helpdeskz
CVE-2022-31400
4.8MEDIUM
Summary
A cross-site scripting vulnerability in Helpdeskz v2.0.2 allows malicious actors to inject arbitrary web scripts or HTML into the email name field of the /staff/setup/email-addresses endpoint. If exploited, this vulnerability can lead to unauthorized actions and compromise the integrity of the site. Users and administrators should take immediate action to apply the necessary security updates.
References
CVSS V3.1
Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved