PT-2014-8870
CVE-2014-9179
·
تاريخ النشر
2014-12-02
·
تاريخ التحديث
2014-12-03
الوصف من
CVSS 2.0
4.0
متوسطةالمقاييسAV:N/AC:L/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
SupportEzzy Ticket System plugin version 1.2.5
Description
A cross-site scripting (XSS) issue exists, allowing remote authenticated users to inject arbitrary web script or HTML via the
URL (optional) field in a new ticket.Recommendations
For SupportEzzy Ticket System plugin version 1.2.5, consider disabling the "URL (optional)" field in new tickets until a patch is available to prevent exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾