Skip to content
OpenAdvisories

Package · Go

github.com/abhinavxd/libredesk

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.3

    Improper Neutralization of HTML Tags in a Web Page in libredesk

    Libredesk is a self-hosted customer support desk. Prior to version 0.8.6-beta, LibreDesk is vulnerable to stored HTML injection in the contact notes feature. When adding notes via POST /api/v1/contacts/{id}/notes, the backend automatically wraps user input in…