CVE-2009-0303

Web Help Desk <9.1.18 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in Web Help Desk before 9.1.18 allows remote attackers to inject arbitrary web script or HTML via vectors related to "encoded JavaScript" and Helpdesk.woa.

References (3)

Scores

EPSS 0.0032
EPSS Percentile 54.9%

Classification

CWE
CWE-79
Status published

Affected Products (50)

webhelpdesk/web_help_desk < 9.1.17
webhelpdesk/web_help_desk
webhelpdesk/web_help_desk
webhelpdesk/web_help_desk
webhelpdesk/web_help_desk
webhelpdesk/web_help_desk
webhelpdesk/web_help_desk
webhelpdesk/web_help_desk
webhelpdesk/web_help_desk
webhelpdesk/web_help_desk
webhelpdesk/web_help_desk
webhelpdesk/web_help_desk
webhelpdesk/web_help_desk
webhelpdesk/web_help_desk
webhelpdesk/web_help_desk
... and 35 more

Timeline

Published Jan 27, 2009
Tracked Since Feb 18, 2026