CVE-2019-16960

Description

SolarWinds Web Help Desk 12.7.0 allows XSS via a CSV template file with a crafted Location Name field.

Base Score

5.4

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS Score

Exploitation Probability

1.934

Vulnerability	OS Platform
Vulnerability CVE-2019-16954,CVE-2019-16956,CVE-2019-16960,CVE-2019-16961 are affected in Web Help Desk 12.7.0	Windows
Multiple Vulnerabilities are affected in Web Help Desk 12.7.0	Windows

No records found