Security Advisory

CVE-2024-2078

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-03-01 11:23:05

Last updated 2025-04-16 20:48:22

Assigner INCIBE

State PUBLISHED

Description

A Cross-Site Scripting (XSS) vulnerability has been found in HelpDeskZ affecting version 2.0.2 and earlier. This vulnerability could allow an attacker to send a specially crafted JavaScript payload within the email field and partially take control of an authenticated users browser session.

← Browse all CVEs View on cve.org ↗