CVE-2020-22609

2021-06-2819:15:07

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.0%

JSON

Cross Site Scripting (XSS) vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter in include/class.queue.php.

CPENameOperatorVersion
osticketeq1.10.2
osticketeq1.9.9
osticketeq1.9.2
osticketeq1.10.1
osticketeq1.9.4-rc2
osticketeq1.10.6
osticketeq1.10-dpr
osticketeq1.9.5
osticketeq1.10-rc.2
osticketeq1.9.4

Name	Operator	Version
osticket	eq	1.10.2
osticket	eq	1.9.9
osticket	eq	1.9.2
osticket	eq	1.10.1
osticket	eq	1.9.4-rc2
osticket	eq	1.10.6
osticket	eq	1.10-dpr
osticket	eq	1.9.5
osticket	eq	1.10-rc.2
osticket	eq	1.9.4