Cross site scripting

2021-09-0812:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

24.8%

JSON

Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in Deskpro 2021.1.7 contains a cross-site scripting (XSS) vulnerability in the download file feature on a manager profile due to lack of input validation.

CPENameOperatorVersion
deskproeq2021.1.6
deskproeq2021.1.6

CPE	Name	Operator	Version
	deskpro	eq	2021.1.6
	deskpro	eq	2021.1.6

References

www.r29k.com/articles/bb/stored-xss-in-deskpro

0.001 Low

EPSS

Percentile

24.8%

JSON

Related for PRION:CVE-2021-36695