Vulnerabilities

TI-2023-26864 CVE-2023-49216 · GHSA-2pcv-f3gh-xqxp

Usedesk before 1.7.57 allows profile stored XSS.

LOW 25

Usedesk before 1.7.57 allows profile stored XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00388 Published 2023-11-23 No fix listed CWE-79

TI-2023-26863 CVE-2023-49215 · GHSA-ph92-rph5-h9x8

LOW 27

Usedesk before 1.7.57 allows filter reflected XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00406 Published 2023-11-23 No fix listed CWE-79

TI-2023-26862 CVE-2023-49214 · GHSA-r445-r4r9-q329

MEDIUM 44

Usedesk before 1.7.57 allows chat template injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00826 Published 2023-11-23 No fix listed CWE-74