| Package | Affected versions | Patched versions |
|---|---|---|
| esupport | = 2.1.2= 2.1.8= 2.2= 2.2.5= 2.3= 2.3.1= 3.00.13= 3.00.90= 3.04.10≤ 3.60.04 | |
| supportsuite | = 3.00.26= 3.00.32= 3.10.00= 3.10.02= 3.11.00= 3.11.01= 3.20.02= 3.50.06≤ 3.60.04 |
Cross-site scripting (XSS) vulnerability in modules/tickets/functions_ticketsui.php in Kayako SupportSuite and eSupport 3.60.04 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the staff control panel, a different vector than CVE-2007-1145.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free