VYPR
← All advisories
Low severity3.5NVD Advisory· Published Sep 6, 2024· Updated Jun 17, 2026

CVE-2024-27125

CVE-2024-27125

Description

A cross-site scripting (XSS) vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability could allow authenticated administrators to inject malicious code via a network.

We have already fixed the vulnerability in the following version: Helpdesk 3.3.1 and later

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Qnap/Helpdesk2 versions
    cpe:2.3:a:qnap:helpdesk:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:qnap:helpdesk:*:*:*:*:*:*:*:*range: <3.3.1
    • (no CPE)range: >=3.3.1
  • QNAP Systems Inc./Helpdeskcpe-rescue
    Range: 3.3.x

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.