CVE-2010-0460

no score yetEPSS 1.0%

Multiple cross-site scripting (XSS) vulnerabilities in staff/index.php in Kayako SupportSuite 3.60.04 and earlier allow remote authenticated users to inject arbitrary web script or HTML via the (1) subject parameter and (2) contents parameter (aka body) in an insertquestion action. NOTE: some of these details are obtained from third party information.

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2010-01-28
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

kayako:esupport
kayako:supportsuite

References

http://osvdb.org/61928
http://packetstormsecurity.org/1001-advisories/kayako-xss.txt
http://secunia.com/advisories/38322
http://www.securityfocus.com/archive/1/509122/100/0/threaded
http://www.securityfocus.com/bid/37947

Check your stack JSON