VYPR
High severity7.6NVD Advisory· Published Sep 23, 2024· Updated Jun 17, 2026

CVE-2024-46639

CVE-2024-46639

Description

A cross-site scripting (XSS) vulnerability in HelpDeskZ v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name text field of Custom Fields message box.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Helpdeskz/Helpdeskzinferred2 versions
    <=2.0.2+ 1 more
    • (no CPE)range: <=2.0.2
    • (no CPE)range: =2.0.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.