CVE-2008-4761

Cross-site scripting (XSS) vulnerability in includes/htmlArea/plugins/HtmlTidy/html-tidy-logic.php in Kayako eSupport 3.20.2 allows remote attackers to inject…

published October 28, 2008

CVSS
—
EPSS
1%
Percentile
73.3
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in includes/htmlArea/plugins/HtmlTidy/html-tidy-logic.php in Kayako eSupport 3.20.2 allows remote attackers to inject arbitrary web script or HTML via the jsMakeSrc parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this issue is probably in the HTMLArea HTMLTidy (HTML Tidy) plugin, not eSupport.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01465 · 73.3th percentile
Published
2008-10-28T00:00Z
EPSS history
Timeline
  • 28 OCT 00:00Z
    Cross-site scripting (XSS) vulnerability in includes/htmlArea/plugins/HtmlTidy/html-tidy-logic.php in Kayako eSupport 3.20.2 allows remote attackers to inject…
    cvelistv5