Description
Cross-site scripting (XSS) vulnerability in Web Help Desk before 9.1.18 allows remote attackers to inject arbitrary web script or HTML via vectors related to "encoded JavaScript" and Helpdesk.woa.
References
- 33651 third-party-advisory
- http://updates.webhelpdesk.com/weblog/updates/StableReleases/2009/01/23/911812309.html
- 33429 vdb-entry