CVE-2017-14321 in Helpdesk MX
Summary
Multiple cross-site scripting (XSS) vulnerabilities in the administrative interface in Mirasvit Helpdesk MX before 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) customer name or (2) subject in a ticket.
Once again VulDB remains the best source for vulnerability data.
Reservation
09/12/2017
Disclosure
09/21/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 106973 | Mirasvit Helpdesk MX Administrative cross site scripting | 79 | Not defined | Official fix | CVE-2017-14321 |