The provided text describes a cross-site scripting (XSS) vulnerability in Deskpro version 1.1.0, where user-supplied input is not properly sanitized. The vulnerability can be exploited by injecting malicious script code via the 'article' parameter in the FAQ page.
Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target:Deskpro 1.1.0
No auth needed
Prerequisites:Access to the vulnerable Deskpro FAQ page