Approved changes feed: RSS · Atom

cpe:2.3:a:kayako:esupport:3.20.2:*:*:*:*:*:*:*

part: a version: 3.20.2 update: *

VendorKayako (9930d4b4-fdc0-5de7-ab36-6a6be5576466)
ProductEsupport (1df945eb-5444-5b07-810b-09ba3077aab1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-4761 vulnerable 2026-06-08 04:50:48.086149 Details available
Cross-site scripting (XSS) vulnerability in includes/htmlArea/plugins/HtmlTidy/html-tidy-logic.php in Kayako eSupport 3.20.2 allows remote attackers to inject arbitrary web script or HTML via the jsMakeSrc parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this issue is probably in the HTMLArea HTMLTidy (HTML Tidy) plugin, not eSupport.
Published: 2008-10-28T00:00:00.000Z
Updated: 2024-08-07T10:24:21.020Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.