CVE-2026-102345

The open-source helpdesk system Zammad is vulnerable to stored cross-site scripting (XSS) in versions prior to 7.1.2 . The flaw exists in the new Vue-based ticket interface , where ticket article content is rendered without proper output encoding. An authenticated user can store malicious markup ...