CVE-2019-25263: Zendesk App SweetHawk Survey 1.6 - Persistent Cross-Site Scripting
Zendesk SweetHawk Survey 1.6 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts through support ticket submissions. Attackers can insert XSS payloads like script tags into ticket text that automatically execute when survey pages are loaded by other users.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-25263?
CVE-2019-25263 has been classified as a high severity vulnerability due to its potential for persistent cross-site scripting attacks.
How do I fix CVE-2019-25263?
To mitigate CVE-2019-25263, it's recommended to update to the latest version of the Zendesk SweetHawk Survey app that addresses this XSS vulnerability.
What does CVE-2019-25263 affect?
CVE-2019-25263 affects the Zendesk SweetHawk Survey app version 1.6.
What type of attack is possible with CVE-2019-25263?
CVE-2019-25263 enables persistent cross-site scripting attacks through the injection of malicious scripts in support ticket submissions.
Who is at risk from CVE-2019-25263?
Users of the Zendesk SweetHawk Survey application are at risk from CVE-2019-25263 if they have not applied the necessary security updates.