PatchTheCVE: helpdeskadvancedhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2023-42234: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Request Forgery (CSRF) via the https://patchthecve.com/cve/CVE-2023-42234.htmlhttps://patchthecve.com/cve/CVE-2023-42234.htmlWed, 17 Jun 2026 06:23:36 +0000MEDIUM 5.4: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Request Forgery (CSRF) via the WSCView function.CVE-2023-42233: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting (XSS) via the Filter/https://patchthecve.com/cve/CVE-2023-42233.htmlhttps://patchthecve.com/cve/CVE-2023-42233.htmlWed, 17 Jun 2026 06:23:36 +0000MEDIUM 6.1: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting (XSS) via the Filter/FilterEditor function.CVE-2023-42232: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the Navigator/Indehttps://patchthecve.com/cve/CVE-2023-42232.htmlhttps://patchthecve.com/cve/CVE-2023-42232.htmlWed, 17 Jun 2026 06:23:35 +0000HIGH 7.5: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the Navigator/Index function.CVE-2023-42231: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Controlhttps://patchthecve.com/cve/CVE-2023-42231.htmlhttps://patchthecve.com/cve/CVE-2023-42231.htmlWed, 17 Jun 2026 06:23:35 +0000HIGH 8.1: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control. Low privileged users can delete admin users by sending a request to the "WSCView/Delete" function.CVE-2023-42230: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting (XSS) via the WSCViewhttps://patchthecve.com/cve/CVE-2023-42230.htmlhttps://patchthecve.com/cve/CVE-2023-42230.htmlWed, 17 Jun 2026 06:23:35 +0000MEDIUM 6.1: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting (XSS) via the WSCView/Save function.CVE-2023-42229: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversalhttps://patchthecve.com/cve/CVE-2023-42229.htmlhttps://patchthecve.com/cve/CVE-2023-42229.htmlWed, 17 Jun 2026 06:23:35 +0000MEDIUM 6.5: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal. Arbitrary files can be created on the system via authenticated SOAP requests to the WSConnector service.CVE-2023-42228: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Controlhttps://patchthecve.com/cve/CVE-2023-42228.htmlhttps://patchthecve.com/cve/CVE-2023-42228.htmlWed, 17 Jun 2026 06:23:35 +0000HIGH 8.8: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control. Low privileged users can edit their own ACL rules by sending a request to the "AclList/SaveAclRules" administrative function.CVE-2023-42227: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the WSCView/Save fhttps://patchthecve.com/cve/CVE-2023-42227.htmlhttps://patchthecve.com/cve/CVE-2023-42227.htmlWed, 17 Jun 2026 06:23:34 +0000HIGH 7.5: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the WSCView/Save function.CVE-2023-42226: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via Email/SaveAttachmehttps://patchthecve.com/cve/CVE-2023-42226.htmlhttps://patchthecve.com/cve/CVE-2023-42226.htmlWed, 17 Jun 2026 06:23:34 +0000HIGH 7.5: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via Email/SaveAttachment function.CVE-2023-42225: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the Attachment/Dowhttps://patchthecve.com/cve/CVE-2023-42225.htmlhttps://patchthecve.com/cve/CVE-2023-42225.htmlWed, 17 Jun 2026 06:23:34 +0000HIGH 7.5: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the Attachment/DownloadTempFile function.