CVE-2012-4872

MEDIUM 4.3CVE-2012-4872 · Published 06/09/2012 · updated 16/06/2026

In short

CVE-2012-4872 is a MEDIUM (CVSS 4.3) vulnerability affecting kayako fusion (kayako).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
kayako fusion kayako	`≤ 4.40.959`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in Tickets/Submit in Kayako Fusion before 4.40.985 allows remote attackers to inject arbitrary web script or HTML via certain vectors, possibly a crafted ticket description.

References

secunia.com/advisories/48462 · Vendor Advisory
st2tea.blogspot.com/2012/03/kayako-fusion-cross-site-scripting.html
wiki.kayako.com/display/DOCS/4.40.985
wiki.kayako.com/display/DOCS/4.40.986
securityfocus.com/bid/52625
exchange.xforce.ibmcloud.com/vulnerabilities/74143

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free