medium5.4
CVE-2020-28722
Deskpro Cloud Platform and on-premise 2020.2.3.48207 from 2020-07-30 contains a cross-site scripting (XSS) vulnerability that can lead to an account takeover v…
Impact
Deskpro Cloud Platform and on-premise 2020.2.3.48207 from 2020-07-30 contains a cross-site scripting (XSS) vulnerability that can lead to an account takeover via custom email templates.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Deskpro | Deskpro | from 2020-07-30 through 2020.2.3.48207 |