Unrated severityNVD Advisory· Published Dec 31, 2005· Updated Jun 16, 2026

CVE-2005-4637

Description

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kayako SupportSuite 3.00.26 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) nav parameter in the downloads module, (2) Full Name and (3) Email fields in the core module, (4) Full Name, (5) Email, and (6) Subject fields in the tickets module, or (7) Registered Email field in the lostpassword feature in the core module.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Kayako/Supportsuitellm-fuzzy
Range: <=3.00.26

Patches

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securityfocus.com/bid/16094nvdVendor Advisory
pridels0.blogspot.com/2005/12/kayako-supportsuite-multiple-vuln.htmlnvd
www.osvdb.org/22224nvd
www.osvdb.org/22225nvd
exchange.xforce.ibmcloud.com/vulnerabilities/23916nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000