5 matches found
Zammad Cross-Site Scripting Vulnerability (CNVD-2020-75062)
Zammad is a Web-based open source helpdesk/customer support system. A stored cross-site scripting vulnerability exists in Zammad versions prior to 3.4.1. An attacker can exploit this vulnerability to execute malicious code via the Tags element in TIcket...
CVE-2020-26035
An issue was discovered in Zammad before 3.4.1. There is Stored XSS via a Tags element in a TIcket...
CVE-2020-26035
An issue was discovered in Zammad before 3.4.1. There is Stored XSS via a Tags element in a TIcket...
PT-2020-16272
Name of the Vulnerable Software and Affected Versions Zammad versions prior to 3.4.1 Description An issue was discovered in Zammad, where there is Stored XSS via a Tags element in a Ticket. Recommendations For versions prior to 3.4.1, update to version 3.4.1 or later to resolve the issue...
CVE-2020-26035: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Zammad before 3.4.1. There is Stored XSS via a Tags element in a TIcket...