This affects the package github.com/gophish/gophish before 0.12.0. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
SysAid Help Desk before 22.1.65 allows XSS via the Asset Dashboard, aka FR# 67262. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
SysAid Help Desk before 22.1.65 allows XSS via the Linked SRs field, aka FR# 67258. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
SysAid Help Desk before 22.1.65 allows XSS in the Password Services module, aka FR# 67241. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
SysAid Help Desk before 22.1.65 allows XSS, aka FR# 66542 and 65579. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.