PT-2012-2158
CVE-2011-5181
·
تاريخ النشر
2012-09-20
·
تاريخ التحديث
2018-10-09
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
ClickDesk Live Support - Live Chat plugin version 2.0
Description
A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the
cdwidgetid parameter in the clickdesk.php file. This could potentially lead to malicious actions on the affected website.Recommendations
For ClickDesk Live Support - Live Chat plugin version 2.0, avoid using the
cdwidgetid parameter in the clickdesk.php file until a fix is available. Consider restricting access to this parameter to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾