Skip to content
OpenAdvisories
Medium · 4.6 CVE-2024-2078 EUVD-2024-27043GHSA-4rw5-4hhm-w395

Cross-Site Scripting vulnerability in HelpDeskZ

Published Mar 1, 2024 · Updated Apr 16, 2025 · Assigned by INCIBE

Description

A Cross-Site Scripting (XSS) vulnerability has been found in HelpDeskZ affecting version 2.0.2 and earlier. This vulnerability could allow an attacker to send a specially crafted JavaScript payload within the email field and partially take control of an authenticated user's browser session.

Affected products

VendorProductAffectedFixed
HelpDeskZ HelpDeskZ ≤ 2.0.2 —

References