Multiple cross-site scripting vulnerabilities in castnewPost.asp in Liberum Help Desk 0.97.3 allow remote attackers to inject arbitrary web script or HTML via the (1) Email, (2) Title, or (3) Description fields.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Liberum_help_desk | Liberum | 0.97.3 (including) | 0.97.3 (including) |