CVE-2024-50053: Stored XSS
Zohocorp ManageEngine ServiceDesk Plus versions below 14920 , ServiceDesk Plus MSP and SupportCentre Plus versions below 14910 are vulnerable to Stored XSS in the task feature.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50053?
CVE-2024-50053 is classified as a moderate severity vulnerability due to its impact on user data via stored XSS.
How do I fix CVE-2024-50053?
To fix CVE-2024-50053, upgrade to ManageEngine ServiceDesk Plus version 14920 or later, or to version 14910 for ServiceDesk Plus MSP and SupportCentre Plus.
What products are affected by CVE-2024-50053?
CVE-2024-50053 affects ManageEngine ServiceDesk Plus versions below 14920, and ServiceDesk Plus MSP and SupportCentre Plus versions below 14910.
What is a stored XSS vulnerability in CVE-2024-50053?
Stored XSS in CVE-2024-50053 allows attackers to inject malicious scripts that are permanently stored on the server and can be executed in users' browsers.
Is user data at risk due to CVE-2024-50053?
Yes, user data is at risk due to the potential for attackers to exploit the stored XSS vulnerability in CVE-2024-50053.