Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9mp8-gcgh-g4g9

Опубликовано: 09 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9

Описание

Cross Site Scripting Vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before and fixed in v.1.3.7 allows attackers to escalte privileges via a crafted payload in the ticket message field.

Cross Site Scripting Vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before and fixed in v.1.3.7 allows attackers to escalte privileges via a crafted payload in the ticket message field.

EPSS

Процентиль: 30%
0.00111
Низкий

9 Critical

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 9
nvd
почти 3 года назад

Cross Site Scripting Vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before and fixed in v.1.3.7 allows attackers to escalte privileges via a crafted payload in the ticket message field.

EPSS

Процентиль: 30%
0.00111
Низкий

9 Critical

CVSS3

Дефекты

CWE-79