CVE-2015-4072 Multiple cross-site scripting (XSS) vulnerabilities in the Helpdesk Pro plugin before 1.4.0 for Joomla! allow remote attackers to inject arbitrary web script or HTML via vectors related to name and me...
MediumCVSS 5.4
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Helpdesk Pro plugin before 1.4.0 for Joomla! allow remote attackers to inject arbitrary web script or HTML via vectors related to name and message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| helpdesk pro project helpdesk pro | <= 1.3.0 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20151231 Joomla! plugin Helpdesk Pro < 1.4.0 exploit mailing-list third-party-advisory vdb-entry
- 75971 exploit third-party-advisory vdb-entry
- 37666 exploit third-party-advisory vdb-entry