Lucene search

K
osvGoogleOSV:CVE-2023-27149
HistoryOct 23, 2023 - 8:15 p.m.

CVE-2023-27149

2023-10-2320:15:08
Google
osv.dev
2
vulnerability
cross-site scripting
enhancesoft osticket

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

20.8%

A stored cross-site scripting (XSS) vulnerability in Enhancesoft osTicket v1.17.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Label input parameter when updating a custom list.

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

20.8%

Related for OSV:CVE-2023-27149