CVE-2024-46226

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-46226
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-46226.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-46226
Published
2025-02-26T16:15:15Z
Modified
2025-04-08T11:01:55.857804Z
Summary
[none]
Details

A stored cross site scripting (XSS) vulnerability in HelpDeskZ < v2.0.2 allows remote attackers to execute arbitrary JavaScript in the administration panel by including a malicious payload into the file name and upload file function when creating a new ticket.

References

Affected packages

Git / github.com/helpdesk-z/helpdeskz-dev

Affected ranges

Type
GIT
Repo
https://github.com/helpdesk-z/helpdeskz-dev
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed

Affected versions

2.*

2.0
2.0.1