← Database

CVE-2005-2460

MEDIUM CVSS: 5.8 Published: 2005-12-31 Modified: 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in Kayako liveResponse 2.x allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter or (2) name field when entering a session or sending a message.

Affected Platforms

Kayako Liveresponse

Weakness Type

NVD-CWE-Other

References