MediumCVSS 6.1
EPSS 0.86%
ClickDesk version 4.3 and below has persistent cross site scripting
Vendor
clickdesk vulnerabilities
2 published CVES affecting clickdesk, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 2
- Critical
- 0
- High
- 0
- Medium
- 2
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
Latest clickdesk CVEs
Newest publication first
-
-
MediumCVSS 4.3 EPSS 10.4% Public exploit
Cross-site scripting (XSS) vulnerability in clickdesk.php in ClickDesk Live Support - Live Chat plugin 2.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cdwidgetid parameter. NOTE: some of these details are obtained from third party informat...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.