CVE-2020-22608

2021-06-2819:15:07

Google

osv.dev

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.9%

JSON

Cross Site Scripting vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter to include/ajax.search.php.

CPENameOperatorVersion
osticketeq1.10.2
osticketeq1.9.9
osticketeq1.9.2
osticketeq1.10.1
osticketeq1.9.4-rc2
osticketeq1.10.6
osticketeq1.10-dpr
osticketeq1.9.5
osticketeq1.10-rc.2
osticketeq1.9.4

Name	Operator	Version
osticket	eq	1.10.2
osticket	eq	1.9.9
osticket	eq	1.9.2
osticket	eq	1.10.1
osticket	eq	1.9.4-rc2
osticket	eq	1.10.6
osticket	eq	1.10-dpr
osticket	eq	1.9.5
osticket	eq	1.10-rc.2
osticket	eq	1.9.4