CVE-2019-16958 - Cross-site Scripting (XSS) vulnerability in SolarWinds Web Help Desk 12.7.0 allows attacker to inject arbitrary web script or HTML via Location Name

MEDIUM

Cross-site Scripting (XSS) vulnerability in SolarWinds Web Help Desk 12.7.0 allows attacker to inject arbitrary web script or HTML via Location Name

Published Dec 1, 2020

5.4

MEDIUM

CVSS 3.1

EPSS 1.17%

Cross-site Scripting (XSS) vulnerability in SolarWinds Web Help Desk 12.7.0 allows attacker to inject arbitrary web script or HTML via Location Name.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7436		Advisory
https://www.esecforte.com/cross-site-scripting-vulnerability-with-solarwinds-web-help-desk/		x_refsource_MISCExploitThird Party Advisory
https://www.solarwinds.com/free-tools/free-help-desk-software		x_refsource_MISCVendor Advisory