Description
Cross-site scripting (XSS) vulnerability in index.php for Kayako ESupport 2.3.1, and possibly other versions, allows remote attackers to inject arbitrary HTML and web script via the nav parameter.
References
- kayako-index-xss(18571) vdb-entry
- 20050215 Kayako eSupport v2.3.1 Support Tracker XSS mailing-list
- 12563 vdb-entry