Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in __swift/thirdparty/PHPExcel/PHPExcel/Shared/JAMA/docs/download.php in Kayako Fusion 4.40.1148, and possibly before 4.50.1581, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Kayako Fusion ‘download.php’跨站脚本漏洞
Vulnerability Description
Kayako Fusion是一款服务台和即时聊天软件。 Kayako Fusion中的in __swift/thirdparty/PHPExcel/PHPExcel/Shared/JAMA/docs/download.php中存在跨站脚本漏洞，该漏洞源于对用户提供的输入未经正确验证。攻击者可利用该漏洞在受影响站点上下文中不知情用户浏览器中执行任意脚本代码，可窃取基于cookie的认证证书并发起其他攻击。Kayako Fusion 4.40.1148版本中存在漏洞，其他版本也可能受到影响。
CVSS Information
N/A
Vulnerability Type
N/A