PT-2021-21310
CVE-2021-36696
·
Published
2021-09-07
·
Updated
2021-09-14
Description by
CVSS 3.1
5.4
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Deskpro versions 2021.1.6
Description
The issue is related to a cross-site scripting (XSS) vulnerability in social media links on a user profile, caused by a lack of input validation.
Recommendations
For Deskpro version 2021.1.6, update to Deskpro 2021.1.7 to resolve the issue. As a temporary workaround, consider restricting the use of social media links on user profiles until the update is applied.
Found an issue in the description? Have something to add? Feel free to write us 👾