CVE-2019-16961

Description

SolarWinds Web Help Desk 12.7.0 allows XSS via a Schedule Name.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://support.solarwinds.com/SuccessCenter/s/ ↗
• https://www.solarwinds.com/free-tools/free-help-desk-software ↗
• https://www.esecforte.com/cross-site-scripting-vulnerability-in-solarwinds-web-help-desk-cve-2019-16961-responsible-vulnerability-disclosure/ ↗