VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Sep 21, 2017· Updated Jun 17, 2026

CVE-2017-14321

CVE-2017-14321

Description

Multiple cross-site scripting (XSS) vulnerabilities in the administrative interface in Mirasvit Helpdesk MX before 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) customer name or (2) subject in a ticket.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Mirasvit/Helpdesk Mx2 versions
    cpe:2.3:a:mirasvit:helpdesk_mx:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mirasvit:helpdesk_mx:*:*:*:*:*:*:*:*range: <=1.5.2
    • (no CPE)range: <1.5.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.