VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Sep 8, 2021· Updated Jun 17, 2026

CVE-2021-36695

CVE-2021-36695

Description

Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in Deskpro 2021.1.7 contains a cross-site scripting (XSS) vulnerability in the download file feature on a manager profile due to lack of input validation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Deskpro/Deskprodescription
  • Headstart Solutions/Deskprollm-create3 versions
    2021.1.6+ 2 more
    • (no CPE)range: 2021.1.6
    • cpe:2.3:a:deskpro:deskpro:2021.1.6:*:*:*:cloud:*:*:*
    • cpe:2.3:a:deskpro:deskpro:2021.1.6:*:*:*:on-premise:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.