CVE-2023-26982

Description

Trudesk v1.2.6 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Tags parameter under the Create Ticket function.

Related CPE's

atrudesk_projecttrudesk1.2.6*******

References

https://trudesk.io/

Product

https://github.com/polonel/trudesk/releases/tag/v1.2.6

Release Notes

https://github.com/bypazs/CVE-2023-26982

ExploitThird Party Advisory

CvssV3 impact

Could not find any metrics

CvssV2 impact

Could not find any metrics
Created by Yello
About Severity.io