VULNERABILITY INTELLIGENCE

CVE-2021-33351

CVSS score9 CRITICAL

EPSS probability1.03%

CISA KEVNot currently listed

Published2023-03-08

Last modified2026-06-17

Description

Cross Site Scripting Vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before and fixed in v.1.3.7 allows attackers to escalte privileges via a crafted payload in the ticket message field.