|
Description
|
|
Ciaran McNally has reported a vulnerability in Helpdesk Pilot, which can be exploited by malicious users to conduct script insertion attacks.
Certain input passed when submitting a ticket is not properly sanitised before being used. This can be exploited to insert arbitrary HTML and script code, which will be executed in a user's browser session in context of an affected site when the malicious data is being viewed.
|
