nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2019-25263 CVE-2019-25263
MEDIUM
Zendesk App SweetHawk Survey 1.6 - Persistent Cross-Site Scripting
Record summary
CVE-2019-25263 has a selected CVSS score of 5.1 (medium); EIP currently links 1 catalogued exploit.
Description
Zendesk SweetHawk Survey 1.6 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts through support ticket submissions. Attackers can insert XSS payloads like script tags into ticket text that automatically execute when survey pages are loaded by other users.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 4, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Zendesk App SweetHawk SurveyBrowse Sweethawk / Zendesk App SweetHawk Survey | CVE List | 1.6 | affected |
Proofs of concept
1Catalogued exploits
ExploitDBZendesk App SweetHawk Survey 1.6 - Persistent Cross-Site ScriptingExploitDB exploitby MTKNot analyzed1 file
References
5SweetHawk Survey App Vendor Homepageproduct
https://sweethawk.co/zendesk/survey-app ExploitDB-47781exploit
https://www.exploit-db.com/exploits/47781 VulnCheck Advisory: Zendesk App SweetHawk Survey 1.6 - Persistent Cross-Site ScriptingThird-party advisory
https://www.vulncheck.com/advisories/zendesk-app-sweethawk-survey-persistent-cross-site-scripting Zendesk Survey App Software Pageproduct
https://www.zendesk.com/apps/support/survey