cve-2017-14321

HIGH vulncheck_kev
Description

Multiple cross-site scripting (XSS) vulnerabilities in the administrative interface in Mirasvit Helpdesk MX before 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) customer name or (2) subject in a ticket.

Timeline
Published
2017-12-28 00:00 UTC
Last Modified
2017-12-28
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cvss": 0.0,
  "datePublished": "2017-12-28T00:00:00Z",
  "dateUpdated": "2017-12-28T00:00:00Z",
  "description": "Multiple cross-site scripting (XSS) vulnerabilities in the administrative interface in Mirasvit Helpdesk MX before 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) customer name or (2) subject in a ticket.",
  "dueDate": "",
  "id": "CVE-2017-14321",
  "kev_catalogs": [
    "vulncheck"
  ],
  "knownRansomwareCampaignUse": "Unknown",
  "product": "helpdesk_mx",
  "requiredAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",
  "severity": "HIGH",
  "source": "vulncheck_kev",
  "title": "Mirasvit helpdesk_mx Improper Neutralization of Input During Web Page Generation",
  "vendor": "Mirasvit"
}
View JSON API Download JSON