Approved changes feed: RSS · Atom

cpe:2.3:a:wyomind:help_desk:*:*:*:*:*:magento_2:*:*

part: a version: * update: *

VendorWyomind (83aa6a9e-1150-56d7-9da5-15bef4b909e0)
ProductHelp Desk (fcc3331d-6aeb-5c6c-8d44-3d1a8e7a6a4f)
Edition*
Language*
Software edition*
Target softwaremagento_2
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-33353 vulnerable 2026-06-08 05:32:11.397968 Details available
Directory Traversal vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute arbitrary code via the file attachment directory setting.
Published: 2023-03-08T00:00:00.000Z
Updated: 2025-03-04T21:11:10.916Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33352 vulnerable 2026-06-08 05:32:11.397635 Details available
An issue in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute arbitrary code via a phar file upload in the ticket message field.
Published: 2023-03-08T00:00:00.000Z
Updated: 2025-03-05T20:31:52.828Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33351 vulnerable 2026-06-08 05:32:11.397206 Details available
Cross Site Scripting Vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before and fixed in v.1.3.7 allows attackers to escalte privileges via a crafted payload in the ticket message field.
Published: 2023-03-08T00:00:00.000Z
Updated: 2025-03-05T20:33:11.037Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.