Vulnerabilities > Ladybirdweb > Faveo Helpdesk

DATE CVE VULNERABILITY TITLE RISK
2023-06-24 CVE-2023-1724 Cross-site Scripting vulnerability in Ladybirdweb Faveo Helpdesk
Faveo Helpdesk Enterprise version 6.0.1 allows an attacker with agent permissions to perform privilege escalation on the application.
network
low complexity
ladybirdweb CWE-79
5.4
5.4
2017-04-06 CVE-2017-7571 Cross-Site Request Forgery (CSRF) vulnerability in Ladybirdweb Faveo Helpdesk 1.9.3
public/rolechangeadmin in Faveo 1.9.3 allows CSRF. 		6.0
6.0