CVE-2020-16193

osTicket before 1.14.3 allows XSS because include/staff/banrule.inc.php has an unvalidated echo $info'notes' call...

CVE-2020-16193: Improper Neutralization of Input During Web Page Generation

osTicket before 1.14.3 allows XSS because include/staff/banrule.inc.php has an unvalidated echo $info'notes' call...

PT-2020-14795

Name of the Vulnerable Software and Affected Versions osTicket versions prior to 1.14.3 Description The issue arises from an unvalidated echo call in the include/staff/banrule.inc.php file, specifically echo $info'notes', which allows for XSS attacks. Recommendations For versions prior to 1.14.3,...