Mirasvit Helpdesk Mx : Security vulnerabilities, CVEs

Copy

CVE-2017-14321

Multiple cross-site scripting (XSS) vulnerabilities in the administrative interface in Mirasvit Helpdesk MX before 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) customer name or (2) subject in a ticket.

Max CVSS

5.4

EPSS Score

0.07%

Published

2017-09-21

Updated

2017-10-04

CVE-2017-14320

Mirasvit Helpdesk MX before 1.5.3 might allow remote attackers to execute arbitrary code by leveraging failure to filter uploaded files.

Max CVSS

8.0

EPSS Score

0.35%

Published

2017-09-21

Updated

2017-10-04

2 vulnerabilities found

This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!